g program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2100, 0x0)
ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000080))
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_GET_CLOCK(r3, 0x8010aebb, 0x0)

19:33:00 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4c00, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2642.357711] validate_nla: 6 callbacks suppressed
[ 2642.357720] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2642.402103] binder: 2224:2227 transaction failed 29201/-28, size 0-19456 line 3035
[ 2642.434834] netlink: 'syz-executor4': attribute type 3 has an invalid length.
19:33:01 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]})

19:33:01 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x14}], 0x1, 0x0, 0xfcc1}, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RREAD(r1, &(0x7f00000000c0)={0x100b, 0x75, 0x1, {0x1000, "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"}}, 0x100b)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000001100)='/dev/v4l-subdev#\x00', 0x400, 0x100)

[ 2642.449627] binder: 2224:2227 ioctl c0306201 200001c0 returned -14
[ 2642.471793] binder_alloc: binder_alloc_mmap_handler: 2224 20001000-20004000 already mapped failed -16
19:33:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0xa8900)
ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080))
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_CLOCK(r3, 0x8048ae66, 0x0)

19:33:01 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_GET_CLOCK(r2, 0x8010aebb, 0x0)

[ 2642.572662] binder_alloc: 2224: binder_alloc_buf, no vma
19:33:01 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]})

19:33:01 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0)
ioctl$RTC_UIE_ON(r1, 0x7003)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000080)=0x9, 0x4)

[ 2642.629662] binder: 2224:2236 transaction failed 29189/-3, size 0-19456 line 3035
[ 2642.716213] binder: 2224:2236 ioctl c0306201 200001c0 returned -14
[ 2642.749769] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2642.806335] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2643.119380] protocol 88fb is buggy, dev hsr_slave_0
[ 2643.119433] protocol 88fb is buggy, dev hsr_slave_0
[ 2643.124517] protocol 88fb is buggy, dev hsr_slave_1
[ 2643.129603] protocol 88fb is buggy, dev hsr_slave_1
[ 2643.139737] protocol 88fb is buggy, dev hsr_slave_0
19:33:02 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x8000000}, 0x0, 0x0)

19:33:02 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4c, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:02 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]})

19:33:02 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
dup2(r2, r1)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x10000, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={<r4=>0x0, 0x7ff}, &(0x7f0000000200)=0xc)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000300)={r4, 0x80, 0x9, [0x3f, 0xb8, 0x7, 0x8, 0x81, 0x800, 0x9b3, 0x40, 0x2]}, 0x1a)
ioctl$KVM_GET_CLOCK(r2, 0x8010aebb, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200, 0x0)
ioctl$KDGKBLED(r5, 0x4b64, &(0x7f0000000080))
epoll_pwait(r5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000140)={0xffffffff}, 0x8)

19:33:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_CLOCK(r3, 0x8048ae66, 0x0)

19:33:02 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x4000, 0x0)

[ 2643.454011] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2643.465127] binder: 2272:2274 got transaction with invalid offsets size, 76
[ 2643.479766] binder: 2272:2274 transaction failed 29201/-22, size 0-76 line 3070
[ 2643.487275] binder: 2272:2274 ioctl c0306201 200001c0 returned -14
19:33:02 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]})

[ 2643.511205] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2643.542955] binder_alloc: binder_alloc_mmap_handler: 2272 20001000-20004000 already mapped failed -16
19:33:02 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x1000000000)
r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7fffffff, 0x900)
ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f00000000c0)={0x25, &(0x7f0000000080)=""/37})

[ 2643.612383] binder: BINDER_SET_CONTEXT_MGR already set
19:33:02 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$getflags(r0, 0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r3 = fcntl$getown(r1, 0x9)
ptrace$peek(0x2, r3, &(0x7f0000000100))
ioctl$int_in(r1, 0x0, &(0x7f00000001c0))
poll(&(0x7f0000000140)=[{r1, 0x8000}, {r0}, {r1}, {r1, 0x400}, {r1, 0x1000}, {r0, 0x400}, {r2, 0x5001}, {r2, 0x4345}, {r1}], 0x9, 0x100000000)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_CLOCK(r4, 0x8048ae66, 0x0)
fsetxattr$security_smack_transmute(r4, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x3)

[ 2643.655611] binder: 2272:2274 ioctl 40046207 0 returned -16
[ 2643.663745] binder_alloc: 2272: binder_alloc_buf, no vma
[ 2643.685902] binder: 2272:2289 transaction failed 29189/-3, size 0-76 line 3035
19:33:02 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]})

19:33:02 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000080)={0x1, 0x0, @pic={0x7, 0x26cf994, 0x800, 0xb88, 0x4a, 0x6, 0xffff, 0x7, 0x9, 0xfffffffffffffffe, 0x1, 0x0, 0x3538, 0x9, 0x40, 0x5}})
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_GET_CLOCK(r3, 0x8010aebb, 0x0)

[ 2643.705145] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2643.741448] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2643.762102] binder: 2272:2289 ioctl c0306201 200001c0 returned -14
19:33:02 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]})

19:33:03 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x4}, 0x0, 0x0)

19:33:03 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
msgget(0x0, 0x22)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x200, 0x4)

19:33:03 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7a00, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:03 executing program 1:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x200000, 0x0)
ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000180)=0x8)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_open_dev$mouse(&(0x7f0000000440)='/dev/input/mouse#\x00', 0x6, 0x4000)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xa10000, 0x200, 0x3, [], &(0x7f00000000c0)={0x990a75, 0x809c, [], @p_u32=&(0x7f0000000080)=0x1000000000}})
io_setup(0x389, &(0x7f0000000040)=<r4=>0x0)
io_getevents(r4, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000001c0))
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r5 = semget$private(0x0, 0x2, 0x70)
semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000200)=[0x3])
getsockopt$sock_int(r3, 0x1, 0x2c, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000400))
ioctl$KVM_GET_CLOCK(r2, 0x8048ae66, 0x0)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x5)

19:33:03 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x2100, 0x0)
getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_GET_CLOCK(r2, 0x8010aebb, 0x0)

19:33:03 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]})

19:33:03 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]})

[ 2644.607001] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2644.612104] binder: 2320:2321 transaction failed 29201/-28, size 0-31232 line 3035
[ 2644.643141] binder: 2320:2321 ioctl c0306201 200001c0 returned -14
[ 2644.687562] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2644.696526] binder_alloc: binder_alloc_mmap_handler: 2320 20001000-20004000 already mapped failed -16
19:33:03 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000, 0x12)
setsockopt$inet_dccp_int(r2, 0x21, 0x0, &(0x7f0000000080)=0x20, 0x4)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_GET_CLOCK(r3, 0x8010aebb, 0x0)

19:33:03 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]})

[ 2644.752015] binder_alloc: 2320: binder_alloc_buf, no vma
[ 2644.755854] binder: BINDER_SET_CONTEXT_MGR already set
19:33:03 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x200000, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffffff7}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4f}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x10}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x40)
accept4(r0, 0x0, 0x0, 0x100000000000000)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

[ 2644.792800] binder: 2320:2330 transaction failed 29189/-3, size 0-31232 line 3035
[ 2644.815665] binder: 2320:2334 ioctl 40046207 0 returned -16
19:33:03 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

[ 2644.844977] binder: 2320:2330 ioctl c0306201 200001c0 returned -14
19:33:03 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]})

19:33:04 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0)

19:33:04 executing program 4:
ioctl$VIDIOC_DQBUF(0xffffffffffffff9c, 0xc0585611, &(0x7f0000000040)={0x7, 0xf, 0x4, 0x310000, {}, {0x1, 0x1, 0x0, 0x1, 0x54f, 0x5, "20c36e1a"}, 0xfffffffffffffff7, 0x3, @fd=<r0=>0xffffffffffffff9c, 0x4})
fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L+', 0x7}, 0x28, 0x0)
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:33:04 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x300, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:04 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x80, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x20400, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_CLOCK(r3, 0x8010aebb, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2000, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x500000000000000, 0x1, 0x9, 0x3}, {0x2, 0x9, 0x1f, 0xff}, {0x2bad, 0x0, 0x5, 0xd7}, {0x10000, 0x9a13, 0x3, 0xffffffffffffff00}, {0x81, 0x3, 0x4, 0x4}, {0x0, 0x40, 0x8, 0xfffffffffffffff9}]})

19:33:04 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]})

19:33:04 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x8)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x20800, 0x0)
close(0xffffffffffffffff)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0xbf, "f36f645262454db873ebfba9ff5ce7f41bc2fa5c165af6d03df29da6153fccdb6c26a1622fde5264facfd63d2b2659bf6ab95011901063e98ad0b744c1380e7d629942c49d71c922fdf32b40c6f954b4536e4b29d26607ce0d55a64c8d66ca9e1f0b00415943536a91eda9f62b12e97f2f3cdb73a3fae858d8b9c5638ca516f1a0399c7ca107d3631b1985466d4c176ace0a5e8a36d30ea388f5f93ac5c593eea25f1e8b164a7b2236a8c7777e9ec8e08fe9b0d78a91ca72ab57dd9c5af458"}, &(0x7f0000000100)=0xe3)

19:33:04 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
socketpair(0x10, 0x1, 0x4, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 2645.693341] binder: 2361:2362 got transaction with invalid offset (0, min 0 max 0) or object.
19:33:04 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]})

[ 2645.740702] binder: 2361:2362 transaction failed 29201/-22, size 0-768 line 3097
[ 2645.766882] binder: 2361:2362 ioctl c0306201 200001c0 returned -14
19:33:04 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001340)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000300)={0x0, 0xfb, 0x1015, 0x4, 0x40, "11ba7375971a9be96fdfa45d84bdd04f", "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"}, 0x1015, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x180, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={<r4=>0x0, 0xc3, "78d1f3a18701e056dad143441e2991ff4625c57f483f865d85aa8490e050d978fa2dffbe860d6bdad22edb62e814bd3c494872b22ea953039503cdc24b247b07cba73fb3357f288eaa2c0c2a691f4eeb951719fd31e631da1293cfc3af8146d979e96beecda5530e4f50d5c405af9d0d70848d1d280fc66ebe5bd2b0997848064a46cc9ce46cfa4771b22148747012abc61dcc98c964333f86584f2d4266a7dbb4be7ea69cccf32aabb90e68cca5362e2633a117c8b17217df9e0f9b6448f87073cc17"}, &(0x7f0000000080)=0xcb)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000000c0)={r4, 0x3ff}, 0x8)
getsockopt$bt_hci(r3, 0x0, 0x0, &(0x7f0000000100)=""/31, &(0x7f0000000280)=0x1f)
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f29cc"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2645.798314] binder_alloc: binder_alloc_mmap_handler: 2361 20001000-20004000 already mapped failed -16
[ 2645.843501] binder: BINDER_SET_CONTEXT_MGR already set
[ 2645.863107] binder: 2361:2362 ioctl 40046207 0 returned -16
19:33:04 executing program 4:
r0 = socket$inet(0x10, 0x3, 0x200000000000c)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4080, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20030}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1ac, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x39d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffffffffff71}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffffffd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xdf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_MEDIA={0x68, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_BEARER={0x28, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

19:33:04 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]})

[ 2645.888290] binder_alloc: 2361: binder_alloc_buf, no vma
[ 2645.911869] binder: 2361:2386 transaction failed 29189/-3, size 0-768 line 3035
[ 2645.952354] binder: 2361:2386 ioctl c0306201 200001c0 returned -14
19:33:04 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000040)=0x1d000)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_GET_CLOCK(r2, 0x8010aebb, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x10000, 0x0)
ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000100)={0x2, r4})

19:33:05 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x1000000}, 0x0, 0x0)

19:33:05 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7400, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:05 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]})

19:33:05 executing program 4:
r0 = socket$inet(0x10, 0x80000, 0x2)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000040)={'bond_slave_1\x00', 0x4})

19:33:05 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="b8ddbd4708e53e064bfdcdc94810a613", 0x3)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
listen(r0, 0x0)
close(r0)

19:33:05 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000027000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x100, 0x0)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)
ioctl$KVM_PPC_ALLOCATE_HTAB(r5, 0xc004aea7, &(0x7f0000000080)=0x3)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_GET_CLOCK(r6, 0x8010aebb, 0x0)

19:33:05 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]})

[ 2646.704489] binder: 2412:2419 transaction failed 29201/-28, size 0-29696 line 3035
[ 2646.727978] binder: 2412:2419 ioctl c0306201 200001c0 returned -14
[ 2646.763556] binder_alloc: binder_alloc_mmap_handler: 2412 20001000-20004000 already mapped failed -16
[ 2646.788063] binder: BINDER_SET_CONTEXT_MGR already set
[ 2646.799936] binder: 2412:2419 ioctl 40046207 0 returned -16
19:33:05 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = syz_open_dev$media(&(0x7f0000001080)='/dev/media#\x00', 0x441c, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f00000010c0)={0x7, 0x5, 0xffff, 0x100000001, 'syz1\x00'})
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1f, 0x200)
ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000080)=""/4096)

19:33:05 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]})

[ 2646.815416] binder_alloc: 2412: binder_alloc_buf, no vma
19:33:05 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f455662a3ef54849db40000003800000081028e3f000000000000000000000000000000009f5197f4a9ac752e33a79773dabd65e54b3da772f13f9659dabb2fe11a82a10251f43163f7a2a29cd74e0d927ddd013b8ef2a0cd160c17c3a1155aee4e8ce88711a612c5cb19272a00dcf59e852a988093c122a35b8af75a446c4ce1036bf7ac717b85aaa97ccded64757d65b7a04104dbd17ec93a0909ea6867abf52de0053c61ad2ea34ca41d8e397c30ec10e994897ae423fa9f6d6d9190afd513348b626be03280175e9a23c1f33059d8ac4e0d1170341e6fee20abfefbb8a6528b1b46f0ebe44d2ccd282e1aa9ad2425f34ec0de4b8b2a8d890b33d2348290943153874bd4d85ee703392aed3fbe871597d1800c2968005d181549e9ea01ff3f5980c3b3712f222e839bf3320fc5f600"], 0x25)
ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000180)=""/150)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x1, 0x3})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={<r1=>0x0}, &(0x7f0000000100)=0xc)
r2 = syz_open_procfs(r1, &(0x7f0000000280)='cpuset\x00')
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000240))
accept4(r0, &(0x7f0000002c00)=@can={0x1d, <r3=>0x0}, &(0x7f0000002c80)=0x80, 0x80000)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000140)=0xb7c)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002cc0)={'ip_vti0\x00', r3})

[ 2646.859667] binder: 2412:2423 transaction failed 29189/-3, size 0-29696 line 3035
[ 2646.882616] binder: 2412:2423 ioctl c0306201 200001c0 returned -14
19:33:05 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000040)='proc&@(security!\\*-ppp1-:em0system]\x00', 0x1)

19:33:05 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6800, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2646.933428] kvm: emulating exchange as write
[ 2647.087451] binder: 2443:2444 transaction failed 29201/-28, size 0-26624 line 3035
[ 2647.121119] binder: 2443:2444 ioctl c0306201 200001c0 returned -14
[ 2647.137594] binder_alloc: binder_alloc_mmap_handler: 2443 20001000-20004000 already mapped failed -16
[ 2647.155546] binder: BINDER_SET_CONTEXT_MGR already set
[ 2647.163999] binder: 2443:2444 ioctl 40046207 0 returned -16
[ 2647.170098] binder_alloc: 2443: binder_alloc_buf, no vma
[ 2647.175846] binder: 2443:2449 transaction failed 29189/-3, size 0-26624 line 3035
[ 2647.183857] binder: 2443:2449 ioctl c0306201 200001c0 returned -14
[ 2647.279470] net_ratelimit: 14 callbacks suppressed
[ 2647.279479] protocol 88fb is buggy, dev hsr_slave_0
[ 2647.289379] protocol 88fb is buggy, dev hsr_slave_0
[ 2647.289635] protocol 88fb is buggy, dev hsr_slave_1
[ 2647.294618] protocol 88fb is buggy, dev hsr_slave_1
[ 2647.299687] protocol 88fb is buggy, dev hsr_slave_0
[ 2647.309677] protocol 88fb is buggy, dev hsr_slave_1
19:33:06 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0)

19:33:06 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]})

19:33:06 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4)

19:33:06 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40020020, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:06 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x424202, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000080))
ioctl$KVM_GET_CLOCK(r2, 0x8010aebb, 0x0)

19:33:06 executing program 1:

[ 2647.738315] validate_nla: 12 callbacks suppressed
[ 2647.738325] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2647.790200] binder: 2462:2464 transaction failed 29201/-28, size 0-1073872928 line 3035
[ 2647.798435] binder: 2462:2464 ioctl c0306201 200001c0 returned -14
[ 2647.814188] netlink: 'syz-executor4': attribute type 3 has an invalid length.
19:33:06 executing program 1:

19:33:06 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]})

[ 2647.848039] binder_alloc: binder_alloc_mmap_handler: 2462 20001000-20004000 already mapped failed -16
19:33:06 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
write$P9_RLERRORu(r0, &(0x7f0000000100)={0x15, 0x7, 0x2, {{0x8, 'lo)wlan0'}, 0x46}}, 0x15)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(r0, 0x0, 0x0, 0xfffffffffffffffd)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x88080, 0x0)
ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f00000000c0)={0x3, 0x7, 0xfffffffffffffff7, 0x5, 0x200})
write$P9_RLERRORu(r1, &(0x7f0000000080)={0x15, 0x7, 0x2, {{0x8, 'lo)wlan0'}, 0x7}}, 0x15)

19:33:06 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40, 0x0)
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x20010, r3, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x400, 0x4)
ioctl$KVM_GET_CLOCK(r2, 0x8010aebb, 0x0)

[ 2647.926084] binder: BINDER_SET_CONTEXT_MGR already set
[ 2647.943871] binder: 2462:2464 ioctl 40046207 0 returned -16
19:33:06 executing program 1:

[ 2647.974757] binder_alloc: 2462: binder_alloc_buf, no vma
[ 2647.998070] binder: 2462:2482 transaction failed 29189/-3, size 0-1073872928 line 3035
[ 2648.023102] binder: 2462:2482 ioctl c0306201 200001c0 returned -14
19:33:06 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]})

[ 2648.051313] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2648.091319] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2648.319394] protocol 88fb is buggy, dev hsr_slave_0
[ 2648.324487] protocol 88fb is buggy, dev hsr_slave_1
19:33:07 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0)

19:33:07 executing program 1:

19:33:07 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000000000000, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:07 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x9}, 0x10)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$inet(0x2, 0x805, 0x8001)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000080)={<r3=>0x0, 0x8c, "aec72dda232ddf73cc41f08cd28225e82b5c572700b3b29f57b36c70f6ea4b2b4103937650ebb069f1b2724b6a9101cbdc15a2dc9272e1dd421fe75310f17af448fe3a6596d8b926edf658b3dbfc3b325e3b7a0b5f06431e46a0b03335ebb6ae91beab700ec0042b272a06991cc724b302a49cbd1fe9cacf609ee95f6a526c66784ae944c0f42a9122018dce"}, &(0x7f0000000140)=0x94)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000180)={r3}, &(0x7f00000001c0)=0x8)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x1000, 0x4)

19:33:07 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x420001000008912, &(0x7f0000000140)="33f688b932badcc268dbbe3a081d1a09b1a720174a457ec2b72be790def7f65c19504d7a7b3730ac30b05651a271f4356d93b40717721f58e95d5e327f92f6ecbf7bfe4a0801a885b23e1ae18e4004498dbda2bb5d11d4879ad67753a9de0000e44fdee06e26020a8f3415b2dc89bd03000000ae85955411624a9dc77a70de67b1b23bfefacc67cfbef51f2ce4f0855fe67ae035606d9a1a6f621f1574862a")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_GET_CLOCK(r2, 0x8010aebb, 0x0)

19:33:07 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]})

[ 2648.828241] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2648.847010] binder: 2500:2505 transaction failed 29201/-28, size 0--9223372036854775808 line 3035
19:33:07 executing program 1:

19:33:07 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})

[ 2648.871480] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2648.909520] binder: 2500:2505 ioctl c0306201 200001c0 returned -14
[ 2648.937968] binder_alloc: binder_alloc_mmap_handler: 2500 20001000-20004000 already mapped failed -16
19:33:07 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={<r2=>0x0, 0x80000000, 0x9, 0xdcf1, 0x3f, 0xfffffffffffffffa}, &(0x7f0000000080)=0x14)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={r2, 0x4}, &(0x7f0000000100)=0x8)

19:33:07 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]})

[ 2648.987634] binder: BINDER_SET_CONTEXT_MGR already set
19:33:07 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_GET_CLOCK(r4, 0x8010aebb, 0x0)

19:33:07 executing program 1:

[ 2649.027136] binder: 2500:2505 ioctl 40046207 0 returned -16
[ 2649.037718] binder_alloc: 2500: binder_alloc_buf, no vma
[ 2649.065518] binder: 2500:2526 transaction failed 29189/-3, size 0--9223372036854775808 line 3035
[ 2649.076843] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2649.095458] binder: 2500:2526 ioctl c0306201 200001c0 returned -14
[ 2649.113635] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2649.359421] protocol 88fb is buggy, dev hsr_slave_0
[ 2649.364511] protocol 88fb is buggy, dev hsr_slave_1
19:33:08 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x3000000}, 0x0, 0x0)

19:33:08 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff00000000, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:08 executing program 1:

19:33:08 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]})

19:33:08 executing program 4:
syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x200000)
r0 = socket$inet(0x10, 0x3, 0xc)
pipe(&(0x7f0000000080))
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:33:08 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_GET_CLOCK(r2, 0x8010aebb, 0x0)

19:33:08 executing program 1:

[ 2649.915301] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2649.932176] binder: 2549:2558 ioctl c0306201 200001c0 returned -14
19:33:08 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]})

[ 2649.992327] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2650.006146] binder_alloc: binder_alloc_mmap_handler: 2549 20001000-20004000 already mapped failed -16
[ 2650.044525] binder: BINDER_SET_CONTEXT_MGR already set
19:33:08 executing program 1:

19:33:08 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
getrusage(0xffffffffffffffff, &(0x7f0000000040))
r2 = getpid()
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r3=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000280)={r3, 0x10001}, 0x8)
wait4(r2, &(0x7f0000000100), 0xe080b3d1912d24d8, &(0x7f0000000140))

19:33:08 executing program 2:
r0 = socket$bt_cmtp(0x1f, 0x3, 0x5)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@buf={0x28, &(0x7f0000000080)="4e4d6b2ff99c8baf087810a8734f3a4c5f2a88b151ee561dc83886c07ec5747a3e8985223a98f007"})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x220000, 0x0)
ioctl$KVM_GET_CLOCK(r3, 0x8010aebb, 0x0)

[ 2650.071109] binder: 2549:2558 ioctl 40046207 0 returned -16
[ 2650.075865] binder_alloc: 2549: binder_alloc_buf, no vma
[ 2650.106298] binder: 2549:2561 ioctl c0306201 200001c0 returned -14
19:33:08 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2000000000000000, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2650.306373] binder: 2582:2583 ioctl c0306201 200001c0 returned -14
[ 2650.341806] binder_alloc: binder_alloc_mmap_handler: 2582 20001000-20004000 already mapped failed -16
[ 2650.351608] binder: BINDER_SET_CONTEXT_MGR already set
[ 2650.360422] binder: 2582:2583 ioctl 40046207 0 returned -16
[ 2650.366343] binder_alloc: 2582: binder_alloc_buf, no vma
[ 2650.373810] binder: 2582:2586 ioctl c0306201 200001c0 returned -14
19:33:09 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)

19:33:09 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]})

19:33:09 executing program 4:
r0 = socket$inet(0x10, 0x4, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x10)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000018c0)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@remote}}, &(0x7f00000019c0)=0xe8)
sendmsg$xdp(r1, &(0x7f0000001dc0)={&(0x7f0000001a00)={0x2c, 0x5, r2, 0x6}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000001a40)="d2057ab16c4d66dbde24444429c43a30f165b008ec153e0300a5666b1b11481867432f5ab486360b82d996345d23f09894467bd48ca566e78c8b5e1c8b7f6d1bcab090cdcf862252", 0x48}, {&(0x7f0000001ac0)="93fd38070adea2ca460e764c45da042cdadf9b5321a9778a816c1875394d2b96e3bb940a0ba9168d4f90f55b09e1faff67cb30c21d4447f43057a79ab47d610554c4860c7bb72c96f641f879b8621e4f4ef53262ec0c91df7b23ffa327af3b1e7bc25f08ffdca0b4f9a5461160c39303e2", 0x71}, {&(0x7f0000001b40)="109c11d1264bf898fbac5548b5698b8994c8e4e52a560dc07e45104dd1e76c8b807857df585c490961399a06de8a3f4daf434b955322dd7790d7ea10ff863397703c217e719ea93da4f95479670f20a5e1610f6a5128a339c0ab43b895d0f3f2cb029eed600e103b0fc229272390271db4a78f1a88f8346930b55daa4f11e7e3391d17ac1c886e60303893a27958fe617931f482edac2d3dc7edb41c4ea84c4265f1f069d07409ea57ff5c12cf9383e04555", 0xb2}, {&(0x7f0000001c00)="376abef1387c0ff3cbe0610d26823543ebf3e1912af1ac7d9ed1fb3990d788ec3994373d477885169434092c7e90c32bdc03f9c240ab713cdbe902b648ae8b2baf6cc0fc3c6e0d872875e11fd9789052a141b81474e034f2a0f461a9191cfe870e8c2a8f6fff4ef2ac416623b7dd489b85271ccedc1a113735981486873b54f1052b456982792907ac0f0f8e5df9d294c4d16cd5a803a512f4ec609a815e414fe092bc76248a0a024d072a6addc1961773bd89dfbc11c4acd6672789b731681469e27bad9fb59063b2e9a076f1cfd7bc355817c2af709484a262077e36948c22009764ac21ed85ff50", 0xe9}, {&(0x7f0000001d00)="7eaba6ee3b12081ceb32f94512e37d34cba1f955e6b30ceafd65c82ee1dc9c488984f7266f6e7640cbcfb16d16bc79f553a256c2", 0x34}], 0x5, 0x0, 0x0, 0x8890}, 0x51)
recvmsg$kcm(r1, &(0x7f0000001840)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff}}, 0x80, &(0x7f0000001700)=[{&(0x7f00000000c0)=""/192, 0xc0}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/173, 0xad}, {&(0x7f0000001240)=""/22, 0x16}, {&(0x7f0000001280)=""/240, 0xf0}, {&(0x7f0000001380)=""/156, 0x9c}, {&(0x7f0000001440)=""/20, 0x14}, {&(0x7f0000001480)=""/239, 0xef}, {&(0x7f0000001580)=""/206, 0xce}, {&(0x7f0000001680)=""/128, 0x80}], 0xa, &(0x7f00000017c0)=""/65, 0x41}, 0x40002161)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000001880)={0x0, @speck128, 0x2, "01f4652c0211211f"})
fchdir(r3)

19:33:09 executing program 1:

19:33:09 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x400, 0x0)
ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000140))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000180)="934bbfd285b58ed444119f7d7db47d48376beb5d39f18231726a137a29e4dce97bbfbf9837b02e50131ca49a146b7c7f2dba428603044f0d748c959b219acb78432ec957e78e9d5908dc9ebdd8a8086858e1e75a61d6d520d0521dd88bc4cdc4d9599ef6bc17", &(0x7f0000000200)="abd1afa5c0969a2ef14853c646aa5bbdb770e39484d6b17c5aaaeb1a358c2dd12835aa495a3f0b979f0cbf8c348cb1dfd7dc7fc729a25f9dc866f66e129c1a2b71d870e72f86f559ad489058d81495c16ed0795507a1376dd811a974b66638b51d", 0x1}, 0x20)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000300)="92b791d90cbb26d1d16fc21c3c477df8556ddc7d81448d1980907a22bf022d7356bc1801575f1f1aed85c54f66a2825985f10298c39c629f9a2c57cd42e709e0e062d2f52a5b610f4c542de4e90c958c9d1320c019a983aa3e327bc6c1a3fffdcf969354f29eb89f31efc0ef3ab91dbe139b423e3e8df5790e1fa3ab613e371f6fdea4cb1236d652b6b095b71d7f8174b7997404ae0a96d46c9e22b26eb5e6282430", 0xa2)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xa180, 0x0)
ioctl$VIDIOC_S_MODULATOR(r3, 0x40445637, &(0x7f0000000080)={0x7fff, "d15f2e0248abba766884721b23870e40811995aa29676f7694f519e1de684c3d", 0x1302, 0x9, 0x0, 0x4, 0x5})
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_CLOCK(r4, 0x8010aebb, 0x0)

19:33:09 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x700, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:09 executing program 1:

19:33:09 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]})

[ 2651.059507] binder: 2596:2599 got transaction with invalid offset (0, min 0 max 0) or object.
[ 2651.089436] binder_transaction: 4 callbacks suppressed
[ 2651.089455] binder: 2596:2599 transaction failed 29201/-22, size 0-1792 line 3097
19:33:09 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0xa1, "f4ec66b50feb2f12f377dbd5313069ace510a5a7fdfcab53858c47788e69cb6d40738ed79cf24ec2ecec24333ccfef09e2ab1862e79fe09689c55e7243b448a6941ba3ff99e3c28623f999ace9efacbf701bb839d244a0b5052acc3d3b5e019b559520f6dfa843e8fccf9274d3b460a3c8ca3805af80d2b902076522c3ce1424895955fe9143d8a30df05ad99f2b9d751fc254faf5960dffbedf3049821300c002"}, &(0x7f00000002c0)=0xc5)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000040)={<r2=>0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x3f, 0xffffffff, 0x5, 0xfd86, 0x60fa}, &(0x7f0000000100)=0x98)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r2}, &(0x7f0000000180)=0x8)

19:33:09 executing program 1:

[ 2651.177416] binder: 2596:2599 ioctl c0306201 200001c0 returned -14
19:33:09 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]})

[ 2651.220676] binder_alloc: binder_alloc_mmap_handler: 2596 20001000-20004000 already mapped failed -16
19:33:09 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ftruncate(r0, 0x6)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = shmget(0x2, 0x1000, 0x78000800, &(0x7f0000ffd000/0x1000)=nil)
shmat(r2, &(0x7f0000ffd000/0x2000)=nil, 0x4000)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_GET_CLOCK(r3, 0x8010aebb, 0x0)

[ 2651.265374] binder: BINDER_SET_CONTEXT_MGR already set
[ 2651.295704] binder_alloc: 2596: binder_alloc_buf, no vma
[ 2651.340167] binder: 2596:2599 ioctl 40046207 0 returned -16
[ 2651.358881] binder: 2596:2613 transaction failed 29189/-3, size 0-1792 line 3035
[ 2651.380980] binder: 2596:2613 ioctl c0306201 200001c0 returned -14
19:33:10 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0)

19:33:10 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="9fbc67630216dd8a37c61da97e40a70d6babb3142a8e758abbf1e6d11e9ca27c78fa86eb66e78920778ae94882e53aae1379b08d8dc2212b5e6844ef6d4ececfa39266e4b1a58f63b3"}, {&(0x7f00000000c0)="47d4e864c06595b893eaa6109d9e860406501718aada93197208fd691a5fedb4f5fb53d0975d7114410219e9014118442de86fdb34878ff0a4dcc62e72ad402bb28ef6dc941be7cb068192f252d1650718d354a2e204e6bc89b360e80b9da39c4b60"}], 0x1, 0x0, 0x305}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000180)={0x6, 0x8001, 0x2, 'queue0\x00', 0x21})

19:33:10 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

19:33:10 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffff, 0x4)
syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x200)
bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
socket$inet(0x2, 0x0, 0x200)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0)
ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000080))
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaabaabb08004500001c0000000000119078ac14ffbbffffffff00004e2000089078"], 0x0)

19:33:10 executing program 2:
r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0xfffffffffffffff9, 0x20083)
fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000140)=0xc)
fchown(r0, r1, r2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$KVM_GET_CLOCK(r5, 0x8010aebb, 0x0)

19:33:10 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:10 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})

[ 2652.216314] binder: 2640:2642 got transaction with invalid offset (0, min 0 max 0) or object.
[ 2652.249578] binder: 2640:2642 transaction failed 29201/-22, size 0-96 line 3097
19:33:10 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400, 0x0)
ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000000c0)={0xfff, 0xfffffffffffffeff, 0x4, 0x400, 0xcd5a, 0x2})
getpgrp(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='K7'])
read$FUSE(r1, &(0x7f0000000580), 0xefee)
write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x1b, 0x0, 0x0, 0xc00}}, 0x50)

19:33:10 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000005c0)="2400000013480e0c4d0a07031dfffd946fa2830020200a03efff0000001d0568011baba20400e87e5e14f53a9ebeffd00b770c0514", 0x35}], 0x1}, 0x0)
accept4(r0, 0x0, 0x0, 0x4000800)
prctl$PR_GET_TIMERSLACK(0x1e)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x1, @multicast2, 0x4e22, 0x3, 'wrr\x00', 0x8, 0xfffffffeffffffff, 0x18}, 0x2c)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x4a8, 0x0, 0x140, 0x280, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f0000000080), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @rand_addr=0x3, @empty, 0xf, 0xffffffff}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @loopback, @broadcast, 0x2, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f8)

[ 2652.272629] binder: 2640:2642 ioctl c0306201 200001c0 returned -14
19:33:11 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x9, &(0x7f00000000c0)="0adc1f9705123f3188ce7048ea6e8840817d2248c7b4f70e0000f23e24cd903669dc100ad99591b8c4c14a8567f33100bc09839dbb42")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x3, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_GET_CLOCK(r2, 0x8010aebb, 0x0)

[ 2652.334745] binder_alloc: binder_alloc_mmap_handler: 2640 20001000-20004000 already mapped failed -16
19:33:11 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]})

[ 2652.386375] binder_alloc: 2640: binder_alloc_buf, no vma
[ 2652.398407] binder: BINDER_SET_CONTEXT_MGR already set
[ 2652.423216] binder: 2640:2642 transaction failed 29189/-3, size 0-96 line 3035
19:33:11 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000002ac0)='/dev/bus/usb/00#/00#\x00', 0x2, 0x10800)
r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000002c40)='NET_DM\x00')
sendmsg$NET_DM_CMD_START(r0, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x14, r1, 0x712, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1)
r2 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000002a40)=[{{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, 0x80, &(0x7f0000002280)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/178, 0xb2}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/206, 0xce}], 0x4, &(0x7f00000022c0)=""/217, 0xd9}, 0x531f8123}, {{&(0x7f00000023c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002440)=""/32, 0x20}, {&(0x7f0000002480)=""/4, 0x4}, {&(0x7f00000024c0)=""/204, 0xcc}, {&(0x7f00000025c0)=""/215, 0xd7}, {&(0x7f00000026c0)=""/129, 0x81}, {&(0x7f0000002780)=""/67, 0x43}, {&(0x7f0000002800)=""/135, 0x87}, {&(0x7f00000028c0)=""/107, 0x6b}, {&(0x7f0000002940)=""/41, 0x29}], 0x9}, 0x6}], 0x2, 0x40, 0x0)

[ 2652.453757] binder: 2640:2661 ioctl 40046207 0 returned -16
[ 2652.475772] binder: 2640:2642 ioctl c0306201 200001c0 returned -14
[ 2652.482396] net_ratelimit: 15 callbacks suppressed
[ 2652.482404] protocol 88fb is buggy, dev hsr_slave_0
[ 2652.482470] protocol 88fb is buggy, dev hsr_slave_1
19:33:11 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0)

19:33:11 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0xffad)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x800000406, r0)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)=ANY=[], 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
ptrace$peekuser(0x3, 0x0, 0x3)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x10\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00')
ioctl$FS_IOC_FSGETXATTR(r2, 0x401c5820, &(0x7f0000000040))

19:33:11 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]})

19:33:11 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_GET_CLOCK(r2, 0x8010aebb, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000040)={0x1, 0x0, @ioapic={0x10004, 0x10000, 0x5, 0x1f, 0x0, [{0x5c99, 0x81, 0xfffffffffffffff8, [], 0x7fff}, {0x3, 0x800, 0x4, [], 0x1}, {0x1, 0xfff, 0x80000001, [], 0x3}, {0x9, 0x0, 0x3, [], 0x5}, {0x9dc5, 0x7, 0x2, [], 0x80000000}, {0x2, 0x81, 0x2, [], 0x6e7c}, {0x1, 0x2, 0x3ff, [], 0x6}, {0x2, 0x3f, 0x1f, [], 0x100}, {0x5, 0x1, 0x0, [], 0x8}, {0x409, 0x800, 0x20, [], 0x4}, {0x244, 0x6b1, 0x8, [], 0x1f}, {0x1f, 0x81, 0xa6}, {0x5, 0x8001, 0xfff, [], 0x5}, {0x0, 0x7, 0x1, [], 0xdc}, {0x5, 0x2, 0x80000001, [], 0x1}, {0x3, 0x10001, 0x100000001, [], 0x901}, {0xc0, 0x5, 0x5, [], 0x80000000}, {0x2, 0x2, 0x2, [], 0x8}, {0x0, 0x800, 0x7, [], 0x1}, {0x6, 0xfffffffffffff3f7, 0x8, [], 0x85}, {0x100000001, 0x81, 0x2, [], 0x2}, {0x1ff, 0x401, 0x0, [], 0x100000000}, {0x46, 0x9, 0x3f, [], 0xffffffff}, {0x81, 0x1ff, 0x6, [], 0xffffffff}]}})

19:33:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x600000000000000, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:11 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = dup(r0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x9)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
ptrace$getsig(0x4202, r2, 0x9, &(0x7f00000000c0))

[ 2653.253419] binder: 2683:2684 transaction failed 29201/-28, size 0-432345564227567616 line 3035
[ 2653.267579] validate_nla: 6 callbacks suppressed
[ 2653.267588] netlink: 'syz-executor4': attribute type 3 has an invalid length.
19:33:11 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80280, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x0, 0x0)
read(r1, &(0x7f00000003c0)=""/72, 0x48)

19:33:12 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]})

[ 2653.319647] binder: 2683:2684 ioctl c0306201 200001c0 returned -14
[ 2653.339639] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2653.369707] binder_alloc: binder_alloc_mmap_handler: 2683 20001000-20004000 already mapped failed -16
19:33:12 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]})

[ 2653.415417] binder: BINDER_SET_CONTEXT_MGR already set
19:33:12 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xffffffffffffffff, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x420080, 0x0)
ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000200)=""/252)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_GET_CLOCK(r3, 0x8010aebb, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000300)={0x6, 0x800a, 0x9, 0x8, <r4=>0x0}, &(0x7f0000000340)=0x10)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000380)={r4, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000440)=0x84)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000140)={0x0, 0x0, {0x56, 0x8000, 0x184f, {0x1ff, 0xffff}, {0x7, 0x400}, @period={0x5f, 0x10001, 0x2, 0xfffffffffffffff7, 0x101, {0x1, 0x800000000000000, 0x7fff, 0x1}, 0x6, &(0x7f0000000100)=[0x3, 0x5, 0x400, 0x0, 0xb0f0, 0x5]}}, {0x53, 0x0, 0x6, {0x1000, 0xffffffffffffc38c}, {0x8}, @cond=[{0x20, 0xffffffffffffffff, 0x5, 0x80000001, 0x3, 0x9e}, {0x8, 0x200, 0x6, 0x3, 0x98, 0xf999}]}})
shutdown(r0, 0x1)

19:33:12 executing program 4:
r0 = socket$inet(0x10, 0x103, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x4, 0x4, 0x1, {0xa, 0x4e20, 0x89dc, @loopback, 0x6}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="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", 0xfb}, {&(0x7f00000001c0)="fd567e5add4ef36c6b3275cb6a30df04820976f1695980e67812db87f3575fb0236a6ee59a1baabad4821f", 0x2b}, {&(0x7f0000000200)="2e54f255ad6f2acb14fe33", 0xb}], 0x3, &(0x7f0000000280)}, 0x4000080)

[ 2653.453356] binder: 2683:2684 ioctl 40046207 0 returned -16
[ 2653.512714] binder: 2683:2712 transaction failed 29189/-22, size 0-432345564227567616 line 2896
[ 2653.519396] protocol 88fb is buggy, dev hsr_slave_0
[ 2653.521810] protocol 88fb is buggy, dev hsr_slave_0
[ 2653.526715] protocol 88fb is buggy, dev hsr_slave_1
[ 2653.531751] protocol 88fb is buggy, dev hsr_slave_1
[ 2653.541901] protocol 88fb is buggy, dev hsr_slave_0
[ 2653.547009] protocol 88fb is buggy, dev hsr_slave_1
19:33:12 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]})

[ 2653.587560] binder: 2683:2712 ioctl c0306201 200001c0 returned -14
[ 2654.079425] protocol 88fb is buggy, dev hsr_slave_0
[ 2654.084609] protocol 88fb is buggy, dev hsr_slave_0
19:33:12 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0)

19:33:12 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x1d1, &(0x7f0000009ff0), 0x151, 0x0, 0xffffffffffffffc0}, 0xfffffffffffffffe)
r1 = syz_open_dev$admmidi(&(0x7f0000000840)='/dev/admmidi#\x00', 0xd3, 0x300)
getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000880), &(0x7f00000008c0)=0xb)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0)
ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000080)={0x0, 0x401})
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000900)=ANY=[@ANYBLOB="0a000000000000000060000000000000ab00000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00J\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000004000000000000002e00000000000000eb9ca581167de3e18a64d4da770a777528f4f0dd14c6c90c1ab62bed7e77a05eae5478816bc89d39713900576e75be2f85c553dae62f96e4aede347842e097391da8fa93734884b11fb5cb58693b66c52b5e1c757ec0d14858f33747a95b6956a5ef42eed1306ac7ed9417316f679d2f9fb245b4b79cdea273721a9a57705c8963519331757e0e2c6fa9", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000004000000000000001f00000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000100000000009600000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000008300000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000f0010000000000f300000000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000004000100000000007e00000000000000", @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000004f0000000000000c900000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'])

19:33:12 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200000000000000, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:12 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
prctl$PR_SET_TSC(0x1a, 0x1)
ioctl$KVM_GET_CLOCK(r2, 0x8010aebb, 0x0)

19:33:12 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]})

19:33:12 executing program 1:
mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x3, 0xffffffffffffffff)
lsetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)=@known='security.capability\x00', &(0x7f0000000000)='security.capability\x00', 0x14, 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffd000/0x3000)=nil)

19:33:13 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]})

19:33:13 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"})
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x8, 0x48080)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x200000000000002)
ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000080)={0x9, 0x5, 0x55, 0x0, 0x7fff})
ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000040)={0x7f, 0xc1f0, 0xff, 0x2, 0x5})

[ 2654.409119] binder: 2737:2746 transaction failed 29201/-28, size 0-144115188075855872 line 3035
19:33:13 executing program 4:
r0 = socket$inet(0x10, 0x3, 0x7)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x30900, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000100)="c11832ae98bb5969321fd0490251effff53d62e2b7c0fbc513c043d8b29de3f149d2", 0x22)
ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000080)={0x5, 'syz0\x00'})
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
chroot(&(0x7f00000002c0)='./file0\x00')

19:33:13 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})

[ 2654.515639] binder: 2737:2746 ioctl c0306201 200001c0 returned -14
19:33:13 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="b4010000320000022bbd7000fbdbdf251e000000221e2d0233d8e1242446be96d3f47f4187b7faac9093d226a962f990c28f0b151f40174bfe06927b7472411f672d8240b22fe2b8042282ecd97ac8ccfa4b2af726920400790008006800", @ANYRES32=r1, @ANYBLOB="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"], 0x1b4}}, 0x800)
prctl$PR_GET_DUMPABLE(0x3)
ioctl$KVM_GET_CLOCK(r2, 0x8010aebb, 0x0)

[ 2654.583168] binder_alloc: binder_alloc_mmap_handler: 2737 20001000-20004000 already mapped failed -16
[ 2654.627351] binder: BINDER_SET_CONTEXT_MGR already set
19:33:13 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})

[ 2654.675916] binder: 2737:2746 ioctl 40046207 0 returned -16
[ 2654.695236] binder_alloc: 2737: binder_alloc_buf, no vma
[ 2654.714146] binder: 2737:2781 transaction failed 29189/-3, size 0-144115188075855872 line 3035
[ 2654.814609] binder: 2737:2781 ioctl c0306201 200001c0 returned -14
19:33:14 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0)

19:33:14 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8)
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
bind$xdp(r1, &(0x7f0000000280)={0x2c, 0x1, r2, 0xb, r1}, 0x10)
fchownat(r0, &(0x7f0000000040)='./file0\x00', r3, r4, 0x800)

19:33:14 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x3ffffffffffffffd)
r1 = socket(0x10, 0x80000, 0x1000)
getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4)

19:33:14 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400000000000000, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:14 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400000, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000080)={0x1, {0x0, 0x1c9c380}, 0xffffffffffffff00, 0xfffffffffffffff9})
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_CLOCK(r3, 0x8010aebb, 0x0)

19:33:14 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]})

19:33:14 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]})

[ 2655.488975] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2655.521108] binder: 2794:2799 transaction failed 29201/-28, size 0-288230376151711744 line 3035
[ 2655.545746] binder: 2794:2799 ioctl c0306201 200001c0 returned -14
[ 2655.559227] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2655.574516] binder_alloc: binder_alloc_mmap_handler: 2794 20001000-20004000 already mapped failed -16
19:33:14 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x4, 0x8, 0x8001, 0x3f, 0x0, 0x3e, 0x4c0f, 0x1, 0x40, 0x313, 0x1, 0x5, 0x38, 0x2, 0x7, 0x7b4, 0x1}, [{0x5, 0x3f, 0x9, 0x8, 0x0, 0x7, 0x2, 0x6}, {0x60000007, 0x8, 0x2, 0xfffffffffffff089, 0x81, 0x1, 0x400, 0x4}], "cc759fff9cfe9e1951d01e19b5fd3fa2dc1286a0cf6e1fac56d1f8331f7b540cb3fe6cae30605491e7d19549f0546704278b313e2ad6174f300767510cf97a32aed259ffe6dc7888b31dd3d0c6e97e3e4d6f6bde0a7dbb63184189f035e002e2ffe36a51c732b3e8260b49a737059a8adf56ca9faf2c992425fda58b387f1972d09ff94c25f951302e011c250f2ede2d99e44da456a5b106a049e6c586c7336e21176f", [[], [], []]}, 0x453)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:33:14 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3000000, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2655.608700] binder: BINDER_SET_CONTEXT_MGR already set
[ 2655.620040] binder: 2794:2799 ioctl 40046207 0 returned -16
[ 2655.629161] binder_alloc: 2794: binder_alloc_buf, no vma
[ 2655.635615] binder: 2794:2811 transaction failed 29189/-3, size 0-288230376151711744 line 3035
[ 2655.645667] binder: 2794:2811 ioctl c0306201 200001c0 returned -14
19:33:14 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80}}], 0x1, 0x0, &(0x7f0000003280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r1, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0)
mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000380)={r0, 0x8186, 0x2, "30d001ca06a8ea5582331b8f69ede2214cb4977bdbbf83b14aba2d63de8b092ca868940170cb4e2c83159b1af145f6a9ea209c08b352941ff4482f1b07fbf5b0e94b751955877b3db5d415"})
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0)
move_pages(0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0)
ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x10)
close(0xffffffffffffffff)
write$P9_RCREATE(r0, &(0x7f00000001c0)={0x18, 0x73, 0x2, {{0x49fdfcf56b553f1b, 0x3, 0x8}, 0x20}}, 0x18)
write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

19:33:14 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]})

19:33:14 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x78)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = semget(0x3, 0x3, 0x408)
semctl$IPC_INFO(r2, 0x5, 0x3, &(0x7f0000000100)=""/130)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0)
recvfrom$rxrpc(r4, &(0x7f0000000200)=""/33, 0x21, 0x2040, &(0x7f0000000240)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x24)
ioctl$KVM_GET_CLOCK(r3, 0x8010aebb, 0x0)

[ 2655.728372] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2655.757348] binder: 2819:2820 ioctl c0306201 200001c0 returned -14
[ 2655.795614] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2655.815858] binder_alloc: binder_alloc_mmap_handler: 2819 20001000-20004000 already mapped failed -16
[ 2655.840368] binder: BINDER_SET_CONTEXT_MGR already set
[ 2655.845690] binder: 2819:2828 ioctl 40046207 0 returned -16
[ 2655.878041] binder_alloc: 2819: binder_alloc_buf, no vma
[ 2655.908146] binder: 2819:2831 ioctl c0306201 200001c0 returned -14
19:33:15 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, 0x0)

19:33:15 executing program 4:
prctl$PR_GET_THP_DISABLE(0x2a)
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:33:15 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]})

19:33:15 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:15 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x14)
ioctl$KVM_GET_CLOCK(r2, 0x8010aebb, 0x0)

[ 2656.601545] binder_transaction: 2 callbacks suppressed
[ 2656.601563] binder: 2842:2843 transaction failed 29201/-28, size 0-33554432 line 3035
[ 2656.630969] netlink: 'syz-executor4': attribute type 3 has an invalid length.
19:33:15 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]})

[ 2656.659866] binder: 2842:2843 ioctl c0306201 200001c0 returned -14
[ 2656.708722] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2656.721330] binder_alloc: binder_alloc_mmap_handler: 2842 20001000-20004000 already mapped failed -16
19:33:15 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]})

19:33:15 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0xffffffffffffff90)
r1 = socket$inet6_sctp(0xa, 0x1000000005, 0x84)
r2 = accept4(r0, 0x0, 0x0, 0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2002, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={<r4=>0x0})
ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000240)={r4, &(0x7f0000000140)=""/225})
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x42, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r5, &(0x7f00000002c0)="f5efd3de390dc272344896e10ac9372148a942fa75878dd312feae428c74a642040582f0b1a1b3de3f426eaf59c8bad358527ccad4c2f5cf52a25fef1261af32d33edbe08f0eafdc69240c64c073635d58d2e519c3567f60388f7bbcba9826860915431cfdf44efa9df29f5ad173405e5e07a5b5dd067b7a78959f5745e65a3557ae143c17a2b4cd576c0e866ba0fc96fe931bba817c284cfe6e", &(0x7f0000000380)="5630df1cbe34c388f0b51365b0635814c9739b645255d702977bc2b9f7af1a3e28db8a01b25e94900822572a5bc3c03dbdcd55d947564ff3b783b89858d27f48c57f826fb42751518c3f7f1b", 0x1}, 0x20)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0xeb730000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98)

[ 2656.774387] binder: BINDER_SET_CONTEXT_MGR already set
[ 2656.807939] binder: 2842:2843 ioctl 40046207 0 returned -16
19:33:15 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:33:15 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x101000, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x4, @empty, 0x40}], 0x1c)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_CLOCK(r3, 0x8010aebb, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xc0000, 0x0)
ioctl$CAPI_GET_ERRCODE(r4, 0x80024321, &(0x7f0000000080))

[ 2656.845358] binder_alloc: 2842: binder_alloc_buf, no vma
[ 2656.869608] binder: 2842:2868 transaction failed 29189/-3, size 0-33554432 line 3035
19:33:15 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]})

[ 2656.927102] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2656.946830] binder: 2842:2868 ioctl c0306201 200001c0 returned -14
[ 2656.961300] netlink: 'syz-executor4': attribute type 3 has an invalid length.
19:33:15 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2657.125406] binder: 2885:2886 got transaction with invalid offsets size, 7
[ 2657.139193] binder: 2885:2886 transaction failed 29201/-22, size 0-7 line 3070
[ 2657.181910] binder: 2885:2886 ioctl c0306201 200001c0 returned -14
[ 2657.218345] binder_alloc: binder_alloc_mmap_handler: 2885 20001000-20004000 already mapped failed -16
[ 2657.241667] binder: BINDER_SET_CONTEXT_MGR already set
[ 2657.256206] binder: 2885:2886 ioctl 40046207 0 returned -16
[ 2657.259645] binder_alloc: 2885: binder_alloc_buf, no vma
[ 2657.271477] binder: 2885:2890 transaction failed 29189/-3, size 0-7 line 3035
[ 2657.278883] binder: 2885:2890 ioctl c0306201 200001c0 returned -14
19:33:16 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0)

19:33:16 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1)
write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{0x20, 'TRUE'}, {0x20, '-'}], 0xa, "930ba1f96b642950c31903930bd21c2d277fb4292bb4fcbadd5a8d7164125c4276cbefb3106387f207915850148c0a90a92d95397b6abaab7d9964e232766733414206a19b35ed67f24442b0f4f8792a060dde6fcd346f569b06cddbd8d0c8dbf14350bdd4f29fb2be0d2d017bb565dd6b104349b6d85a801b77efce2a34e017f5b6091a762f33c5b2cef5d7"}, 0x9e)
setxattr$security_smack_transmute(&(0x7f0000000100)='\x00', &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x2)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:33:16 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]})

19:33:16 executing program 2:
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246)
write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ecff"], 0x2)
close(r0)
mknod(&(0x7f0000000480)='./file0\x00', 0x100000001043, 0x0)
execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x0, 0x400)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="070312000000000600dd4587915d735c95d8490ae247f18e7a82731bab9ea4e09be29ee54df0b09159e9295ff973f9e7e48b06d96903ae8bd0e8c02bd197e6041c35571783874207990dc1d337baa5ed5453fdb1eb9069cf706743bd5ba592ae8036ee69236dd3c0499a28851cb09678777d0af590f8d75ef5a76ff94ee9bdcd4a19f562065d47bc1dc36d1f5506468c920a99a0097abfda33d5f65fceeccfec95144d222016dae3f28a8d0ca07134bc47886e7327155a72b645508f514974245a1e8fedc21371b48c7e652a5f88e434f8213e95803a0fd82ddddc441ff8dd3c66b46fef693597"], 0xe7, 0x3)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @multicast2}, 0x800, 0x1}, 0x20)
socket$inet6(0xa, 0x0, 0x0)

19:33:16 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6000000000000000, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:16 executing program 1:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000700)=ANY=[])
r1 = getpid()
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x248380, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x81}, &(0x7f0000000440)=0x8)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffd9, &(0x7f0000000280))
fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000580))
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000500)=r1)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e1f, @local}, {0x2, 0x4e22, @multicast1}, 0xa, 0x7, 0x0, 0x0, 0x708f, &(0x7f0000000640)='bridge_slave_1\x00', 0x82, 0x7, 0xcef})
fchmod(r2, 0x20)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000540)={0x0, 0xcad, 0x8, &(0x7f0000000380)})
ftruncate(r7, 0x2007fff)
fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f00000004c0)='./bus\x00', 0x6, 0x2)
ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000000000)=r1)
write$P9_RXATTRCREATE(r7, &(0x7f0000000140)={0x7}, 0x7)
ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000340)=""/60)
ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000480))
write$P9_RSETATTR(r7, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r4, r7, &(0x7f0000d83ff8)=0x2006, 0x800000000024)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x3)

19:33:16 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]})

[ 2657.680629] binder: 2896:2897 transaction failed 29201/-28, size 0-6917529027641081856 line 3035
[ 2657.713093] binder: 2896:2897 ioctl c0306201 200001c0 returned -14
19:33:16 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x101000, 0x0)
ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000180)={{0x7000, 0x10000, 0xe, 0x1, 0x5, 0x4, 0x7ff, 0x2, 0x1, 0x7fffffff, 0x7fff, 0x4}, {0x2, 0x1, 0x0, 0x1, 0x2, 0x1, 0x51, 0x4, 0x455124ea, 0x3, 0x28f1, 0x2}, {0x0, 0x2000, 0x9, 0x0, 0xfff, 0x9, 0xe6, 0x400000000, 0xfffffffffffff5f6, 0x6, 0x1f8, 0x5}, {0x5000, 0x4, 0xf, 0x401, 0x10001, 0x9, 0x1000, 0x6, 0x936, 0x800, 0x8d}, {0x107000, 0xd000, 0xe, 0x8, 0xe371, 0x0, 0x10001, 0x1, 0xfffffffffffffb6a, 0xcb, 0x9, 0x2}, {0x10000, 0xf000, 0x3, 0xfffffffffe99b1be, 0x3f, 0x1, 0x20, 0x4, 0x7, 0x3, 0xffff, 0x3f}, {0x6000, 0x100000, 0xc, 0x0, 0x7c000000000000, 0x0, 0x8, 0x4, 0x7fffffff, 0x3, 0x3, 0x5}, {0x1000, 0x2000, 0x13, 0x380, 0x2, 0x8, 0x3f, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x101}, {0xd000, 0x4001}, {0x1f000, 0xd000}, 0x40000, 0x0, 0x100004, 0x20, 0x6, 0x8000, 0x3000, [0xffff, 0x10000, 0x4, 0x81f1]})
r1 = socket$inet(0x10, 0x3, 0xc)
clock_gettime(0x0, &(0x7f00000002c0)={<r2=>0x0, <r3=>0x0})
timerfd_settime(r0, 0x1, &(0x7f0000000300)={{}, {r2, r3+10000000}}, &(0x7f0000000340))
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xae, 0x20000)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000100)=0x20, 0x4)
ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)={0xfff, 0xf, 0x4, 0x4, {}, {0x3, 0x0, 0x7, 0x0, 0x0, 0x5, "f645515a"}, 0xfa, 0x3, @planes=&(0x7f0000000380)={0x6, 0x3, @userptr=0x200, 0x6}, 0x4})
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_access\x00')
setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, &(0x7f0000000040)='vmnet0+.##snuseteth0posix_acl_access)usersecurityppp0Jem1\x00', 0x34)

[ 2657.758402] binder_alloc: binder_alloc_mmap_handler: 2896 20001000-20004000 already mapped failed -16
[ 2657.810793] binder: BINDER_SET_CONTEXT_MGR already set
[ 2657.821380] binder: 2896:2897 ioctl 40046207 0 returned -16
[ 2657.838511] binder_alloc: 2896: binder_alloc_buf, no vma
19:33:16 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
socket$can_raw(0x1d, 0x3, 0x1)
r1 = syz_open_dev$video4linux(&(0x7f0000000a80)='/dev/v4l-subdev#\x00', 0x0, 0x0)
close(r1)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000000)={0x5, 0x6, 0x4, 0x22041000, {0x0, 0x7530}, {0x3, 0xc, 0x7, 0x52, 0x800, 0x800, "aa84ddd9"}, 0x7, 0x6, @offset=0xffffffffffffbcd7, 0x4})

[ 2657.862577] binder: 2896:2917 transaction failed 29189/-3, size 0-6917529027641081856 line 3035
[ 2657.893916] binder: 2896:2917 ioctl c0306201 200001c0 returned -14
19:33:16 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4800000000000000, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:16 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
r1 = dup3(r0, r0, 0x80000)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={<r2=>0x0, 0xb3, 0x30, 0x9, 0x9}, &(0x7f0000000080)=0x18)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x1, 0x80, 0x4}, 0x10)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:33:16 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x400002)
accept4$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14, 0x800)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=<r2=>0x0, @ANYBLOB], &(0x7f0000000140)=0xe)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0x4, 0x10}, 0xc)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 2658.064968] binder: 2937:2944 transaction failed 29201/-28, size 0-5188146770730811392 line 3035
[ 2658.109449] binder: 2937:2944 ioctl c0306201 200001c0 returned -14
[ 2658.217734] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 2658.239385] net_ratelimit: 12 callbacks suppressed
[ 2658.239393] protocol 88fb is buggy, dev hsr_slave_0
[ 2658.249561] protocol 88fb is buggy, dev hsr_slave_0
[ 2658.254610] protocol 88fb is buggy, dev hsr_slave_1
[ 2658.289878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2658.331449] binder_alloc: binder_alloc_mmap_handler: 2937 20001000-20004000 already mapped failed -16
[ 2658.351538] binder_alloc: 2937: binder_alloc_buf, no vma
[ 2658.363127] binder: BINDER_SET_CONTEXT_MGR already set
[ 2658.372176] binder: 2937:2944 transaction failed 29189/-3, size 0-5188146770730811392 line 3035
[ 2658.388149] binder: 2937:2938 ioctl 40046207 0 returned -16
[ 2658.416059] binder: 2937:2944 ioctl c0306201 200001c0 returned -14
19:33:17 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0)

19:33:17 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x5, 0x12900)
ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000080)={0x1, 0xffff, 0x101})
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:33:17 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]})

19:33:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0xd000, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:33:17 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1200, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2658.536380] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 2658.599781] validate_nla: 8 callbacks suppressed
[ 2658.599800] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2658.635091] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2658.659728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2658.681418] binder: 2956:2970 got transaction with invalid offsets ptr
[ 2658.688167] binder: 2956:2970 transaction failed 29201/-14, size 0-4608 line 3062
[ 2658.696605] binder: 2956:2970 ioctl c0306201 200001c0 returned -14
[ 2658.719375] protocol 88fb is buggy, dev hsr_slave_0
[ 2658.724529] protocol 88fb is buggy, dev hsr_slave_1
[ 2658.754427] binder_alloc: binder_alloc_mmap_handler: 2956 20001000-20004000 already mapped failed -16
[ 2658.788206] binder: BINDER_SET_CONTEXT_MGR already set
[ 2658.793756] binder: 2956:2964 ioctl 40046207 0 returned -16
[ 2658.800922] binder_alloc: 2956: binder_alloc_buf, no vma
[ 2658.807760] binder: 2956:2970 transaction failed 29189/-3, size 0-4608 line 3035
[ 2658.819215] binder: 2956:2970 ioctl c0306201 200001c0 returned -14
19:33:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = socket$inet(0x10, 0x3, 0xc)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000100))
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000030a07031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0)

19:33:17 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x88200, 0x0)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:33:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0xd000, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:33:17 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]})

19:33:17 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1200000000000000, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2658.965813] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2658.987230] binder: 2980:2982 ioctl c0306201 200001c0 returned -14
[ 2659.003984] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'.
19:33:17 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]})

[ 2659.014590] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2659.028564] binder_alloc: binder_alloc_mmap_handler: 2980 20001000-20004000 already mapped failed -16
[ 2659.047788] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'.
19:33:17 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe)
getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[ 2659.109893] binder: BINDER_SET_CONTEXT_MGR already set
[ 2659.146042] binder: 2980:2982 ioctl 40046207 0 returned -16
[ 2659.169203] binder_alloc: 2980: binder_alloc_buf, no vma
[ 2659.185381] binder: 2980:2992 ioctl c0306201 200001c0 returned -14
19:33:18 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0)

19:33:18 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

19:33:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0xd000, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:33:18 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]})

19:33:18 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6800000000000000, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x404400, 0x101)
ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000100)={0x4, 0x0, 0xfffffffffffffffb})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000040)={'team0\x00'})
gettid()
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=<r4=>0x0)
sched_setscheduler(r4, 0x0, 0x0)
r5 = gettid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r5)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags=0x2})
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0)
sendfile(r2, r2, 0x0, 0xf9f4)

[ 2659.707474] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2659.720359] binder: 3006:3013 ioctl c0306201 200001c0 returned -14
[ 2659.742161] netlink: 'syz-executor4': attribute type 3 has an invalid length.
19:33:18 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})

19:33:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0xd000, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

[ 2659.758069] binder_alloc: binder_alloc_mmap_handler: 3006 20001000-20004000 already mapped failed -16
[ 2659.769403] protocol 88fb is buggy, dev hsr_slave_0
[ 2659.774537] protocol 88fb is buggy, dev hsr_slave_1
[ 2659.794282] binder_alloc: 3006: binder_alloc_buf, no vma
[ 2659.800590] binder: BINDER_SET_CONTEXT_MGR already set
19:33:18 executing program 4:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x60803, 0x0)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000000c0)={0x1, 0x40})
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(r0, 0x0, 0x0, 0x80800)

19:33:18 executing program 1:
getrandom(0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0)
ioctl$RTC_UIE_OFF(r1, 0x7004)
r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000080)={0xfffffffffffffff8, 0x6})
ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000240)={0x10300})
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0)

[ 2659.836403] binder: 3006:3013 ioctl 40046207 0 returned -16
[ 2659.842178] binder: 3006:3017 ioctl c0306201 200001c0 returned -14
19:33:18 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]})

[ 2659.911041] netlink: 'syz-executor4': attribute type 3 has an invalid length.
19:33:18 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5000000, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2659.998476] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2660.058227] binder: 3037:3043 ioctl c0306201 200001c0 returned -14
[ 2660.132551] binder_alloc: binder_alloc_mmap_handler: 3037 20001000-20004000 already mapped failed -16
[ 2660.162427] binder: BINDER_SET_CONTEXT_MGR already set
[ 2660.184382] binder: 3037:3043 ioctl 40046207 0 returned -16
[ 2660.191925] binder_alloc: 3037: binder_alloc_buf, no vma
[ 2660.197451] binder: 3037:3050 ioctl c0306201 200001c0 returned -14
[ 2660.319364] protocol 88fb is buggy, dev hsr_slave_0
19:33:19 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0)

19:33:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:33:19 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000500)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xb9\xb3\xf8h>\xcf\x89\xde\xe9\x01\xd2\xdau\xc0\x1f\x02\x00\xf5\x8d&\xd7\xa0q\xfb53\x1c\xe3\x9cZ\xee\xffP\x83\xcf\a\xddFE\\\x91MJ\xff\x1e|\xf7\xedW\xc0\xc2\x05o\\\xa9\xfc\xf0<\xbf\x82\xbd\x13SG73\x92E\xd3\xc7\x06A\xbeb\x81\xd7\xe1\xb4\xb7\t\x91\x14\xc5q\x87\"\x98\xdd\x7f! \xe2\xb6\xfa*.*,\x9cn\x004u\vya\xfa,\x15\x84\xc0\xb5\xa5\x00\xae\n\xc3\x9b\xc7jx\xd9\x15\x82fu\x9fvj>\x8c\x84\xc0\x9c\xf3\xad\x88\x82\x94\x7f\xfa\x1f\xb4\xc0Pr{\xeb\x12\xc5~\x06\xffY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89$W\x8a\xd4\x9e\xa1\x14LtH\xd6@\xaa\x88\xa6jq\xb7}s\xa9$\xff\x02\x7f\xdc\xb5P\x16\x16S\xd4\xcbW\b\x83\x85$\x82\x86\xf5\xbe\x9d\x87f\xc7\f)\xe6\xf5\x06=\xfet\xa1\xb0\xb5 y\x15\x90H!\vM\'\x1a\xc9L\x88\x9b\x06<\xa3J\tW\x9a\xf061\xf1(\xe6\xdd,\x96m\xae\xcd|o~\x0fN\xbc\xaf\x80%\f\xfa\xb0q\x84\x83\x80x\xc7\x1d\x80\x9d\x06\xdc\v\xacu\xdb\x81E%\xd1\xd1\xac\xafL\xb6\xf4\x89\x0f9s\x82\xaecf\x97\xf6\x88\tN8\xdb\\\"w\x0fS\alc\r\xf9\xbbL\x14\x91\x89\xff\xa9u\xf5 \x871\x1c[\xaa\xfc\x11\xc9\v\xdc%\xfc\x80;q\x15=\xdc9\x95\xb2\xdfI\xcd\xd7\x84\xbc[\xea@\x86\x10p\xda\xdb9^\x85\xc9<\xdf\xa0\x8e')
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
pkey_mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
mlock(&(0x7f0000001000/0x4000)=nil, 0x4000)
pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000240)={0x7, 0x4d, 0x2}, 0x7)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000000000/0x2000)=nil, 0x2000}, &(0x7f0000000200)=0x10)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'bcsh0\x00', {0x2, 0x4e23, @loopback}})
accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8)

19:33:19 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]})

19:33:19 executing program 1:
getrandom(0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0)
ioctl$RTC_UIE_OFF(r1, 0x7004)
r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000080)={0xfffffffffffffff8, 0x6})
ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000240)={0x10300})
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0)

19:33:19 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x48000000, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2660.784788] binder: 3061:3062 ioctl c0306201 200001c0 returned -14
[ 2660.790782] netlink: 'syz-executor4': attribute type 3 has an invalid length.
19:33:19 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]})

[ 2660.841632] binder_alloc: binder_alloc_mmap_handler: 3061 20001000-20004000 already mapped failed -16
19:33:19 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0xd000, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

[ 2660.908513] binder: BINDER_SET_CONTEXT_MGR already set
19:33:19 executing program 1:
getrandom(0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0)
ioctl$RTC_UIE_OFF(r1, 0x7004)
r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000080)={0xfffffffffffffff8, 0x6})
ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000240)={0x10300})
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0)

[ 2660.934881] binder: 3061:3062 ioctl 40046207 0 returned -16
19:33:19 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0xd000, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:33:19 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})

19:33:19 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x500, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2661.191646] binder: 3104:3105 got transaction with invalid offset (0, min 0 max 0) or object.
[ 2661.218501] binder: 3104:3105 ioctl c0306201 200001c0 returned -14
[ 2661.231008] binder_alloc: binder_alloc_mmap_handler: 3104 20001000-20004000 already mapped failed -16
[ 2661.253658] binder: BINDER_SET_CONTEXT_MGR already set
[ 2661.262343] binder: 3104:3105 ioctl 40046207 0 returned -16
[ 2661.268120] binder_alloc: 3104: binder_alloc_buf, no vma
[ 2661.273797] binder: 3104:3108 ioctl c0306201 200001c0 returned -14
19:33:20 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0)

19:33:20 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x40)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:33:20 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0xd000, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:33:20 executing program 1:
getrandom(0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0)
ioctl$RTC_UIE_OFF(r1, 0x7004)
r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000080)={0xfffffffffffffff8, 0x6})
ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000240)={0x10300})
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0)

19:33:20 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]})

19:33:20 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20000200, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2661.888339] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2661.904902] binder_transaction: 9 callbacks suppressed
[ 2661.904920] binder: 3123:3127 transaction failed 29201/-28, size 0-536871424 line 3035
19:33:20 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]})

19:33:20 executing program 2:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0xd000, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

[ 2661.942213] binder: 3123:3127 ioctl c0306201 200001c0 returned -14
19:33:20 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
r1 = syz_open_dev$sndpcmc(&(0x7f0000001700)='/dev/snd/pcmC#D#c\x00', 0x2, 0x2)
accept$unix(r1, &(0x7f0000001740)=@abs, &(0x7f00000017c0)=0x6e)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 2661.997732] binder_alloc: binder_alloc_mmap_handler: 3123 20001000-20004000 already mapped failed -16
19:33:20 executing program 1:
getrandom(0x0, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000080)={0xfffffffffffffff8, 0x6})
ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2662.048071] binder: BINDER_SET_CONTEXT_MGR already set
19:33:20 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]})

[ 2662.072486] binder: 3123:3127 ioctl 40046207 0 returned -16
[ 2662.100550] binder_alloc: 3123: binder_alloc_buf, no vma
19:33:20 executing program 2:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0xd000, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

[ 2662.140066] binder: 3123:3150 transaction failed 29189/-3, size 0-536871424 line 3035
[ 2662.179604] binder: 3123:3150 ioctl c0306201 200001c0 returned -14
19:33:21 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0)

19:33:21 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100))
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer\x00', 0x200000, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
geteuid()
readlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/168, 0xa8)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x180, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @loopback}, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8)
lchown(&(0x7f0000000040)='./file0\x00', r2, r3)
accept4(r0, 0x0, 0x0, 0x80800)

19:33:21 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x7ffffffff000, &(0x7f00000003c0)})

19:33:21 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})

19:33:21 executing program 1:
getrandom(0x0, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:21 executing program 2:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0xd000, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

[ 2663.012359] binder: 3174:3183 ioctl c0306201 200001c0 returned -14
19:33:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0xd000, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:33:21 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]})

19:33:21 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7ff, 0xffffffff, 0x0, 0xa, 0x5, 0xc, "0f96cde7e5c7f7a6a51f53582005c460c273e082fc28875c2a6b069b70291c6e3c7221204aa6f0aafce5a7c40d1d32ed218384290a5594841c654e7d7b9aa5b1", "b23ee476936cfec93f40c7df2030dff3a20c3d8dfe72f5f5c8e38a04d74e00387231c4a092564c5143d3003b7527acec2870b6eb5ec5792f5242e4208672b244", "d8dc98d7e390a57cb2f8881ff2a4aa35046e9ade0386c3fc35f39d20f07d3163", [0xac, 0x8]})
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@loopback}}}, &(0x7f0000000280)=0xe8)
ioprio_get$uid(0x0, r3)

19:33:21 executing program 1:
getrandom(0x0, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2663.059541] binder_alloc: binder_alloc_mmap_handler: 3174 20001000-20004000 already mapped failed -16
[ 2663.095932] binder: BINDER_SET_CONTEXT_MGR already set
[ 2663.138864] binder: 3174:3196 ioctl 40046207 0 returned -16
[ 2663.166258] binder_alloc: 3174: binder_alloc_buf, no vma
19:33:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0xd000, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:33:21 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
socket$bt_rfcomm(0x1f, 0x0, 0x3)

[ 2663.207709] binder: 3174:3205 transaction failed 29189/-3, size 0-0 line 3035
[ 2663.247209] binder: undelivered transaction 4250, process died.
[ 2663.254439] binder: 3174:3205 ioctl c0306201 200001c0 returned -14
19:33:22 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0)

19:33:22 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]})

19:33:22 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000248, &(0x7f00000003c0)})

19:33:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0xd000, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:33:22 executing program 1:
getrandom(0x0, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:22 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:33:22 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0xd000, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

[ 2664.031053] validate_nla: 9 callbacks suppressed
[ 2664.031062] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2664.051701] binder: 3238:3249 ioctl c0306201 200001c0 returned -14
19:33:22 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]})

[ 2664.103410] binder_alloc: binder_alloc_mmap_handler: 3238 20001000-20004000 already mapped failed -16
[ 2664.118232] binder: BINDER_SET_CONTEXT_MGR already set
[ 2664.134087] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2664.152958] binder: 3238:3249 ioctl 40046207 0 returned -16
19:33:22 executing program 1:
getrandom(0x0, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:22 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0xd000, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

[ 2664.183425] binder: undelivered transaction 4253, process died.
19:33:22 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]})

19:33:22 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2664.368103] binder: 3280:3281 ioctl c0306201 200001c0 returned -14
[ 2664.383325] binder_alloc: binder_alloc_mmap_handler: 3280 20001000-20004000 already mapped failed -16
[ 2664.412704] binder: BINDER_SET_CONTEXT_MGR already set
[ 2664.432244] binder: 3280:3281 ioctl 40046207 0 returned -16
[ 2664.451132] binder_alloc: 3280: binder_alloc_buf, no vma
[ 2664.458654] binder: undelivered transaction 4255, process died.
[ 2664.459937] binder: 3280:3282 transaction failed 29189/-3, size 0-0 line 3035
[ 2664.479389] net_ratelimit: 7 callbacks suppressed
[ 2664.479398] protocol 88fb is buggy, dev hsr_slave_0
[ 2664.489378] protocol 88fb is buggy, dev hsr_slave_1
[ 2664.494503] protocol 88fb is buggy, dev hsr_slave_0
[ 2664.504511] binder: 3280:3282 ioctl c0306201 200001c0 returned -14
[ 2664.959442] protocol 88fb is buggy, dev hsr_slave_0
[ 2664.964592] protocol 88fb is buggy, dev hsr_slave_1
19:33:23 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0)

19:33:23 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x8000015, &(0x7f0000000040)={0x77359400}, 0x10)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:33:23 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0xd000, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:33:23 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]})

19:33:23 executing program 1:
getrandom(0x0, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:23 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x2)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xffffffffffffffff, 0x810, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0)
ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000080)={0x6, 0x20})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0007ffff11e66e61ad2e5e8be105e51f57ae490000000000000000027d44ff9c226bff23073dee7f9ad98c43af7c6a7d46e49e78bf769598cef1f50000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2665.161930] binder: 3293:3297 unknown command -63744
[ 2665.175639] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2665.179707] binder: 3293:3297 ioctl c0306201 200001c0 returned -22
19:33:23 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]})

19:33:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0xd000, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

[ 2665.209430] binder: BINDER_SET_CONTEXT_MGR already set
[ 2665.219604] binder: 3293:3311 unknown command -63744
[ 2665.236600] binder: 3293:3308 ioctl 40046207 0 returned -16
[ 2665.253721] binder: 3293:3311 ioctl c0306201 200001c0 returned -22
19:33:23 executing program 1:
getrandom(0x0, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:23 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
fcntl$setsig(r0, 0xa, 0xe)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:33:24 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x2)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)={<r3=>0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x70, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {{0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000040)=[@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0xa, 0x2, 0x22}], &(0x7f00000000c0)=[0x38]}, 0x1}}, @acquire_done={0x40106309, r3, 0x1}, @decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x1}], 0xec, 0x0, &(0x7f0000000200)="bf9a135d449baf74b572d5907f57559e5fff54b683ed3cb465bba155c0f57fc75e7a030bbe28efdce3e1259b662b5c249fe713dda8fd0a00ebdc1405f845cde583ecbb9826a48d386e3256b65af35fab8ec7bef83c849d1f251a1bdef17acc9d02e90714eee99f080dce79338fa2d148a6aa77769a0bcb8d927a1354a597dcad1fe63506fa01dd79dba07c763e95a156a873bf3ae6b9dc93bdff0c85589ef4f7b41de3ea2d714d98490fbe1ca4562c005d251d33cde3fe1187d1083375f26e0b74cbff807afed895cee3735af1afd47d3e78595c3754af405e664084b9779876dd156a209f79fad078f073b1"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000050000000000000000000000000000000000433925efb245bbf4c19a", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2665.417361] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2665.456690] netlink: 'syz-executor4': attribute type 3 has an invalid length.
19:33:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

[ 2665.467857] binder: 3335:3336 got reply transaction with no transaction stack
[ 2665.510415] binder: 3335:3336 transaction failed 29201/-71, size 80-8 line 2801
[ 2665.533829] binder: 3335:3341 transaction failed 29201/-28, size 4126141683601506304--7295280836198076635 line 3035
[ 2665.556564] binder: 3335:3341 ioctl c0306201 200001c0 returned -14
[ 2665.567758] binder_alloc: binder_alloc_mmap_handler: 3335 20001000-20004000 already mapped failed -16
[ 2665.582430] binder: BINDER_SET_CONTEXT_MGR already set
[ 2665.609545] binder: 3335:3336 ioctl 40046207 0 returned -16
[ 2665.621605] binder: 3335:3341 got reply transaction with no transaction stack
[ 2665.639608] binder_alloc: 3335: binder_alloc_buf, no vma
[ 2665.642050] binder: 3335:3341 transaction failed 29201/-71, size 80-8 line 2801
[ 2665.645947] binder: 3335:3345 transaction failed 29189/-3, size 4126141683601506304--7295280836198076635 line 3035
[ 2665.666401] binder: 3335:3345 ioctl c0306201 200001c0 returned -14
[ 2665.999375] protocol 88fb is buggy, dev hsr_slave_0
[ 2665.999422] protocol 88fb is buggy, dev hsr_slave_0
[ 2666.004473] protocol 88fb is buggy, dev hsr_slave_1
[ 2666.009567] protocol 88fb is buggy, dev hsr_slave_1
[ 2666.019797] protocol 88fb is buggy, dev hsr_slave_0
19:33:24 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0)

19:33:24 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]})

19:33:24 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:33:24 executing program 1:
getrandom(0x0, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x0, 0xd000, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:33:24 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
pwrite64(r2, &(0x7f0000000040)="10b35ff7ad9fc10b655d0435d1078d3c9a8210014d376fc800621ba1b43a18a4c9717041a6d541bb6c31859edcd4a644d7d3e7d77b1890a9e684fa4cde45f2367de5873258ba92a4b13fac20d6503380a25a0a313b3e202215df9cafb3ace26f137f43f3184678c94411fadf1c373f53d3a379638e75da94be0f82fd67579622b60555e298542363fb738ee3b69c2e47e7", 0x91, 0x0)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=<r3=>0x0)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000140)={0x9})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000005000000000000000000000ace880deba6657ed3c6e44ee239000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2666.155138] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2666.175976] binder: 3356:3358 transaction failed 29201/-28, size -3207014117058705202-248609957062 line 3035
19:33:24 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]})

[ 2666.219627] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2666.245380] binder: 3356:3358 ioctl c0306201 200001c0 returned -14
19:33:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:33:24 executing program 4:
r0 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x4ce, 0x400040)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r1 = socket(0x9, 0xa, 0x3)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x100, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x200}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x800)
r3 = socket$inet(0x10, 0x3, 0xc)
fdatasync(r0)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x400, 0x0)
ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000180))
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 2666.284829] binder: BINDER_SET_CONTEXT_MGR already set
19:33:24 executing program 1:
getrandom(0x0, 0x0, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2666.328053] binder: 3356:3369 ioctl 40046207 0 returned -16
19:33:25 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]})

[ 2666.370906] binder_alloc: 3356: binder_alloc_buf, no vma
[ 2666.422136] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2666.424308] binder: 3356:3358 transaction failed 29189/-3, size -3207014117058705202-248609957062 line 3035
[ 2666.459796] binder: 3356:3358 ioctl c0306201 200001c0 returned -14
19:33:25 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x200, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="006340400000000000000000000000400000000000000000050000a2000000000000000000000000000000000000000000000000668a70bafec02443dea9cece746215abfac0dfa4086cd96fc157e5ff6d70c53f5a43a2d5ab89a545f42fb5b41fe1571fd267a86d6a62fbc5f7b5def6", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2666.488044] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2666.614585] binder_alloc: 3387: binder_alloc_buf, no vma
[ 2666.626347] binder: 3387:3388 ioctl c0306201 200001c0 returned -14
[ 2666.635776] binder: BINDER_SET_CONTEXT_MGR already set
[ 2666.641332] binder: 3387:3390 ioctl 40046207 0 returned -16
19:33:25 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0)

19:33:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:33:25 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]})

19:33:25 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:25 executing program 4:
r0 = socket$inet(0x10, 0x800, 0xc687)
sendmsg(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffd79, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x20f, 0x0, 0xffffffffffffff8c}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:33:25 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x400, 0x40040)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000580)={0x53, 0xffffffffffffffff, 0xfb, 0x8, @scatter={0x3, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f00000000c0)=""/209, 0xd1}, {&(0x7f0000000200)=""/68, 0x44}]}, &(0x7f0000000380)="dad5afcf9471dea898336a703a6ff2d220b4d8ea194373a09b52dc25746144b08d50ba16b3ffda33a86b489c62903d024e799cb9b2578664c18684d22d6e758be74191a5992ee4ccd7ff3715ff24a7db20d31bc7ae227f1b5abc8e0845857b32a779ec0fe0ae7c5f14fd988576e583bb772dd45ccb964ab55ef6cc6bb8697daaf5664faa0f6f2d16cbcf213f44ddba761face2de83b525f59058957c1d812d87df1592081741427d6abacf741a56eb876a415be1a9b4be29345cb2c3bca27189c692550fa68437ffcf645e59e5432e694154f0a3fdf924f17b37a372342c884ef51b3dcf2923f3fca28632c3136aec8c6b37db92326f9c34675f7a", &(0x7f0000000480)=""/205, 0x6d3ea9eb, 0x0, 0x2, &(0x7f00000002c0)})
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCEXCL(r2, 0x540c)
recvmmsg(r0, &(0x7f0000005680)=[{{&(0x7f0000000600)=@tipc, 0x80, &(0x7f0000001940)=[{&(0x7f0000000680)=""/160, 0xa0}, {&(0x7f0000000740)=""/3, 0x3}, {&(0x7f0000000780)=""/61, 0x3d}, {&(0x7f00000007c0)=""/76, 0x4c}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/132, 0x84}, {&(0x7f0000001900)=""/29, 0x1d}], 0x7, &(0x7f00000019c0)=""/110, 0x6e}, 0x6}, {{&(0x7f0000001a40)=@sco, 0x80, &(0x7f0000003e40)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/53, 0x35}, {&(0x7f0000003b00)=""/136, 0x88}, {&(0x7f0000003bc0)=""/188, 0xbc}, {&(0x7f0000003c80)=""/222, 0xde}, {&(0x7f0000003d80)=""/164, 0xa4}], 0x7, &(0x7f0000003ec0)=""/45, 0x2d}, 0x7ff}, {{&(0x7f0000003f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000004140)=[{&(0x7f0000003f80)=""/252, 0xfc}, {&(0x7f0000004080)=""/36, 0x24}, {&(0x7f00000040c0)=""/66, 0x42}], 0x3, &(0x7f0000004180)=""/222, 0xde}, 0xffff}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000004280)=""/114, 0x72}, {&(0x7f0000004300)=""/48, 0x30}, {&(0x7f0000004340)=""/222, 0xde}], 0x3, &(0x7f0000004480)=""/173, 0xad}, 0x50000}, {{&(0x7f0000004540)=@hci, 0x80, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/78, 0x4e}], 0x1, &(0x7f0000004680)=""/4096, 0x1000}, 0xdb}], 0x5, 0x10003, &(0x7f00000057c0))
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:25 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]})

19:33:25 executing program 1:
r0 = syz_open_dev$usb(0x0, 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2667.208413] binder_transaction: 1 callbacks suppressed
[ 2667.208431] binder: 3396:3407 transaction failed 29189/-22, size 0-0 line 2896
[ 2667.247902] binder: 3396:3407 ioctl c0306201 200001c0 returned -14
19:33:25 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000004c0)=0xe8)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000500)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e20, 0x9, @loopback, 0x9}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb243}], 0x98)
r3 = syz_open_dev$radio(&(0x7f0000000740)='/dev/radio#\x00', 0x2, 0x2)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000100)={<r4=>0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0xb4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12634840040000000000000004000000000000000000000010000000000000000000000000000000000000001000000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00x\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff7f00000000000008631040", @ANYRES64=r4, @ANYBLOB="0100000000000000076304400100000001634040010000000000000002000000000000000000000011000000000000000000000018000000000000002800000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="852a6466000000b78fca5bb2fe7d8e888100", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="d0979cdc03000000"], 0xf0, 0x0, &(0x7f0000000280)="8f5e9386a1c626860b855bd7d07227b73e5328dcdaf935eb47aa5f8d2756f159f88597981c226302a4a7e06180cb663496699d940f0cff507a9f68a0049d0ffe53d9dcbf65c1fbbc4398df7dcd9ef861f4de05b8ecef766a2f4bbad7bd1bf5ff728b45d40292014159224c8205285bec3936a2d7d62ce268d30f157c18dc3bd18d60a492f78d1e42a4f6439f8d8c6020a99af444f849c89c04eecb0db48934a91a22838a76fb346572c3be0129d54f25415e123ca3fd4b48948a4f45e5848a3923122c44cc06e9e2a418c45d1ae148252da7e4e429628b0548510c818b4b92a6b690247b85dba7adddd127ba37647016"})

19:33:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, 0x0)

[ 2667.344627] netlink: 'syz-executor4': attribute type 3 has an invalid length.
19:33:26 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]})

19:33:26 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2667.960528] binder: 3396:3433 transaction failed 29189/-22, size 0-0 line 2896
[ 2667.967974] binder: 3396:3433 ioctl c0306201 200001c0 returned -14
19:33:26 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0)

19:33:26 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x410000, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00', <r1=>0x0})
sendmsg$xdp(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x2c, 0x2, r1, 0x39}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="1afb49de9370d9e0bf2f86fc05dd6ef480b367bb1952f5debf1bcabbbeded3ccbb96c67e8d4955655edc7787413c2107da656f0100f999273db76cfc8ed00700acd93267e5e2973c10cc945be6acf090dd482bc52ce699cb04b4be", 0x5b}, {&(0x7f0000000180)="77f0c60441d61691be71a093422e983274efca5bdead5882fd1792a3b894ad08f5f6dbaeedbda303295597aa80744b08b795719c81e4a2c24c582e7d8ede14e000368066c70ff532ed5024d1cf3bc79905aa8d353bcb805b93b83dd6b9555889290d291c55e0c58d4ad03af90ed7cbf2079081d476feea6b4c5fe097d472acb6a20ce48d4ce7afa1eddb", 0x8a}, {&(0x7f0000000240)="999d33ecb69f2571eed843c665999ff40e3a7d56aafaeb0e056062e96e9070e7ba0184b2a09d780d858191bb2175497ecbe28a67a81793e0ac881f3bd783d7df27d5a027f8f9637aaaa8efd45aadafe8f8128ccec7bd6b8aea86dba147040fde2633f2411d1be84b884f8c19e43f5e9a2367be5b9d772e3b715c4b70b3d808659d965eed879339ebf9a66093304a967d38ab1205d8fbdb6b7857975bdfbe8a75", 0xa0}, {&(0x7f0000000300)="629cfe3e9152037aac6800a6b6fc", 0xe}, {&(0x7f0000000340)="6f253cf834e32051d5da399a08311317a6e4cfdc92a7e0c7fb367b9a8f89ff240d615db3c493aba68b11445c6c59f56d52624fa336a618804d704cc44b282dcd3b74d2682c4bf21f2a851ea71863e4e230f6351dbed8438126cb0b5a9ba6e6cd44ecb2b9dd0a26505164183a62424834e6ba06ae094eef42bf30e536b167a6cb5074c48c4bef789e42e16bde58321de194506b4bf47a21c7a5347ce687b46b96b176a24473a871858583ae35db19136d97523855f09e8ff94f70bde78c89ae4e5b1865c6dff9286cd913c65ba001d6b3dc50dfea54c451292fcea3c3247c692aa91d59b77843fcc6f10cc11ebf74cd19df3e6bdc6c72f0be", 0xf8}, {&(0x7f0000000440)="8603df580f0f7631a677349ab6bd3595029da958e5d5b75001251a7deb55899814c393a903deab26a6f3", 0x2a}, {&(0x7f0000000480)="678e79a933c1feeeee693f0a0b4790c3392ecad90a744feb4901500d473ad06d18f8f1c11053dfc33fd8f6b60aef974b4da714fdbbf8641b6397be4512f1c693a6f89a472134ab915a79287e39399dde8e27", 0x52}], 0x7, 0x0, 0x0, 0x84}, 0x4000)
r2 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000005c0)='/dev/input/mice\x00', 0x0, 0x0)

19:33:26 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:26 executing program 2:
getrandom(0x0, 0x0, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:26 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]})

19:33:26 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x100000890f, &(0x7f0000000040)="f6846d4d628c020e846796d14d107000000000000000000000")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x4000, 0x0)
ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000140)=""/59)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00867de6122cb92a91634040000000000000000000000000000000000000000005000000000000000000000000ffffffff000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})
r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7ff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x8000, 0x3, 0x6b, 0x7]})
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)

[ 2668.261739] binder: 3441:3444 unknown command -427981312
19:33:26 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:26 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]})

19:33:26 executing program 2:
getrandom(0x0, 0x0, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2668.302020] binder: 3441:3444 ioctl c0306201 200001c0 returned -22
[ 2668.323593] binder: BINDER_SET_CONTEXT_MGR already set
[ 2668.368212] binder: 3441:3450 ioctl 40046207 0 returned -16
[ 2668.403156] binder: 3441:3444 unknown command -427981312
19:33:27 executing program 4:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x101000, 0x0)
ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000140)={0xff, 0x6b106f06})
symlinkat(&(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00')
r1 = socket$inet(0x10, 0x3, 0xc)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000180)=""/49)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40, 0x0)
ioctl$BLKIOOPT(r2, 0x1279, &(0x7f00000000c0))
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000040)=0x9, 0x4)

[ 2668.430265] binder: 3441:3444 ioctl c0306201 200001c0 returned -22
19:33:27 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]})

19:33:27 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2668.503840] QAT: Invalid ioctl
[ 2668.530345] QAT: Invalid ioctl
[ 2668.559187] QAT: Invalid ioctl
[ 2668.600147] QAT: Invalid ioctl
19:33:27 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, 0x0)

19:33:27 executing program 2:
getrandom(0x0, 0x0, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:27 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040ebff050000000000000000000000000000000000000500000000000000000000000000000048d34169b8a9564000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:27 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]})

19:33:27 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:27 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r2)

[ 2669.281221] validate_nla: 5 callbacks suppressed
[ 2669.281232] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2669.301639] binder: 3485:3488 got transaction to invalid handle
19:33:28 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]})

19:33:28 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:28 executing program 2:
getrandom(0x0, 0x0, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2669.323073] binder: 3485:3488 transaction failed 29201/-22, size 4743213997388464128-276331870313 line 2896
[ 2669.336890] binder: 3485:3488 ioctl c0306201 200001c0 returned -14
[ 2669.350140] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2669.366716] binder_alloc: binder_alloc_mmap_handler: 3485 20001000-20004000 already mapped failed -16
19:33:28 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0))
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00')
ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000080))

[ 2669.413157] binder: 3485:3494 got transaction to invalid handle
[ 2669.467955] binder: 3485:3494 transaction failed 29201/-22, size 4743213997388464128-276331870313 line 2896
[ 2669.499842] binder: 3485:3494 ioctl c0306201 200001c0 returned -14
19:33:28 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

19:33:28 executing program 2:
getrandom(0x0, 0x0, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2669.521291] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2669.566392] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2670.159392] net_ratelimit: 15 callbacks suppressed
[ 2670.159401] protocol 88fb is buggy, dev hsr_slave_0
[ 2670.159431] protocol 88fb is buggy, dev hsr_slave_0
[ 2670.164420] protocol 88fb is buggy, dev hsr_slave_1
[ 2670.169482] protocol 88fb is buggy, dev hsr_slave_1
[ 2670.184544] protocol 88fb is buggy, dev hsr_slave_0
[ 2670.189652] protocol 88fb is buggy, dev hsr_slave_1
19:33:29 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0)

19:33:29 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:29 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00')
fsetxattr$security_evm(r2, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="046874de43249581eb34322f000000000000"], 0x12, 0x2)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r4, 0x302, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10f}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xeefe}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x80000000040080)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x458, 0x230, 0x0, 0x230, 0x370, 0x370, 0x370, 0x4, &(0x7f00000002c0), {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, @empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @mac=@dev={[], 0x21}, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}, 0x2, 0x3, 0xcdce, 0x7f, 0x80, 0x8, 'irlan0\x00', 'vcan0\x00', {}, {0xff}, 0x0, 0x10}, 0xf0, 0x118}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xffffffff, 0x3, 0x2}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1, 0xe, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8)

19:33:29 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000040)=0x3, 0x4)

19:33:29 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})

19:33:29 executing program 2:
getrandom(0x0, 0x0, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2670.436798] netlink: 'syz-executor4': attribute type 3 has an invalid length.
19:33:29 executing program 2:
getrandom(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2670.480281] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2670.488178] binder: 3522:3523 ioctl c0306201 200001c0 returned -14
19:33:29 executing program 4:
r0 = socket$inet(0x10, 0xa, 0xc)
sendmsg(r0, &(0x7f0000000080)={0x0, 0xfffffeb0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}]}, 0x0)
accept4(r0, 0x0, 0x0, 0x80000)

19:33:29 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]})

[ 2670.563352] binder_alloc: 3522: binder_alloc_buf, no vma
19:33:29 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:29 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2670.604498] binder: BINDER_SET_CONTEXT_MGR already set
19:33:29 executing program 4:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x101, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)=0x1)
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 2670.669620] binder: 3522:3537 transaction failed 29189/-3, size 0-0 line 3035
[ 2670.687579] binder: 3522:3523 ioctl 40046207 0 returned -16
[ 2670.687641] binder: undelivered transaction 4275, process died.
[ 2670.719417] protocol 88fb is buggy, dev hsr_slave_0
[ 2670.724593] protocol 88fb is buggy, dev hsr_slave_0
[ 2670.729715] protocol 88fb is buggy, dev hsr_slave_1
[ 2670.739776] binder: 3522:3537 ioctl c0306201 200001c0 returned -14
[ 2670.808119] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2670.877893] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2671.199380] protocol 88fb is buggy, dev hsr_slave_0
19:33:30 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0)

19:33:30 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})

19:33:30 executing program 2:
r0 = syz_open_dev$usb(0x0, 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:30 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:30 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000080)={{0x0, 0x0, 0x5, 0x3, 0x7ff}, 0x5, 0x40000})
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
syslog(0xf, &(0x7f0000000100)=""/128, 0x80)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:30 executing program 4:
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffff8, &(0x7f0000009ff0)=[{&(0x7f0000000200)="24001700130a07031dfffd946fa2830020200a0009060300001d85680c1baba20400ff7e95472e70f60adf8fdc8bc3af6071dbc00ef72b4c01eac45a0bfccf35ba2505943ca55e29ed357f045b55d8c7520bacd0ed9dda22d7d0d344b97c8d90bda0b200000000000000000000000000000000", 0x73}], 0x1029}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @loopback}, @in6=@ipv4={[], [], @remote}}}, {{@in6=@ipv4}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001540)={{{@in=@loopback, @in=@remote}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8)
getsockname$packet(0xffffffffffffff9c, &(0x7f00000016c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001700)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', <r2=>r1})
fstatfs(r0, &(0x7f0000000000)=""/6)
setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000001c0)=0x3, 0x4)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000500)={@loopback, r2}, 0x14)
r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x101000)
setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000100)={@rc={0x1f, {0x0, 0x0, 0xddb, 0x4, 0x8b8b}, 0x9}, {&(0x7f0000000540)=""/4096, 0x1000}, &(0x7f00000000c0), 0x8}, 0xa0)

19:33:30 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]})

19:33:30 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2671.548050] binder: 3571:3573 got transaction to context manager from process owning it
[ 2671.575767] binder: 3571:3573 transaction failed 29201/-22, size 0-0 line 2887
[ 2671.586875] binder: 3571:3573 ioctl c0306201 200001c0 returned -14
19:33:30 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2671.618273] binder_alloc: binder_alloc_mmap_handler: 3571 20001000-20004000 already mapped failed -16
[ 2671.656219] binder: BINDER_SET_CONTEXT_MGR already set
19:33:30 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]})

19:33:30 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
accept4(r0, 0x0, 0x0, 0x802)

19:33:30 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2671.705343] binder: 3571:3584 ioctl 40046207 0 returned -16
19:33:31 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0)

19:33:31 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:31 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x100000890c, &(0x7f00000000c0)="0ac032838995ea3812a070")
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x20000240, &(0x7f00000003c0)})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5, 0x8010, r1, 0x0)

19:33:31 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

19:33:31 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:31 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]})

19:33:31 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]})

[ 2672.528494] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2672.559817] binder_alloc: binder_alloc_mmap_handler: 3608 20001000-20004000 already mapped failed -16
19:33:31 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2672.586846] binder: BINDER_SET_CONTEXT_MGR already set
19:33:31 executing program 4:
r0 = socket$inet(0x10, 0x8, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={<r1=>0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x2, &(0x7f0000000040)='\\\x00', 0xffffffffffffffff}, 0x30)
prlimit64(r1, 0xf, &(0x7f00000000c0)={0xc2, 0x1f}, &(0x7f0000000100))
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 2672.622504] binder: 3608:3609 ioctl 40046207 0 returned -16
19:33:31 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:31 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040000000000d0000feab7a9e0e8944a400000000233d5c64c61218dcd9d7000000020000bb000000000000000000004445b8f1e9a4a6f4629973b1522f5dd4949cdda63eac978b7d75dbb65e751e16090dd692b40f08a37b6991ef0c9851f77d6ce5671c8587e306e86e483d05", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:31 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]})

[ 2672.814239] binder: 3639:3640 transaction failed 29201/-28, size 3137339394-4991114287033352192 line 3035
[ 2672.844736] binder: 3639:3640 ioctl c0306201 200001c0 returned -14
[ 2672.888695] binder_alloc: binder_alloc_mmap_handler: 3639 20001000-20004000 already mapped failed -16
[ 2672.925501] binder: BINDER_SET_CONTEXT_MGR already set
[ 2672.931196] binder: 3639:3640 ioctl 40046207 0 returned -16
[ 2672.937107] binder_alloc: 3639: binder_alloc_buf, no vma
[ 2672.945096] binder: 3639:3643 transaction failed 29189/-3, size 3137339394-4991114287033352192 line 3035
[ 2672.955509] binder: 3639:3643 ioctl c0306201 200001c0 returned -14
19:33:32 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0)

19:33:32 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:32 executing program 4:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x410000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000080)={0x20, 0x0, 'client0\x00', 0xffffffff80000000, "85f3b3c9dae24422", "b7997c8f8fb2dbfda1c2203b1a0bd907eda07ce0b02556c51f5e959d4b0e120f", 0x2, 0x4})
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe)
ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000140))

19:33:32 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})

19:33:32 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:32 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = fcntl$dupfd(r0, 0x406, r0)
write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7)
r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
nanosleep(&(0x7f0000000080), &(0x7f00000000c0))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:32 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x408002, 0x0)
accept$alg(r1, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 2673.597582] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2673.613837] binder: 3654:3658 ioctl c0306201 200001c0 returned -14
[ 2673.631400] binder_alloc: binder_alloc_mmap_handler: 3654 20001000-20004000 already mapped failed -16
19:33:32 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]})

19:33:32 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2673.677274] binder: BINDER_SET_CONTEXT_MGR already set
19:33:32 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2673.748681] binder: 3654:3663 ioctl 40046207 0 returned -16
19:33:32 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = dup3(r0, r2, 0x80000)
ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000002000/0x1000)=nil, 0x1000})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2673.814100] binder: undelivered transaction 4284, process died.
19:33:32 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x4)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8)

[ 2673.967771] binder: 3688:3689 ioctl c0306201 200001c0 returned -14
[ 2673.978228] binder: undelivered transaction 4286, process died.
[ 2673.985693] binder_alloc: 3688: binder_alloc_buf, no vma
[ 2674.004698] binder: 3688:3694 transaction failed 29189/-3, size 0-0 line 3035
[ 2674.012655] binder: 3688:3694 ioctl c0306201 200001c0 returned -14
19:33:33 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0, 0x0)

19:33:33 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]})

19:33:33 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:33 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:33 executing program 4:
r0 = socket$inet(0x10, 0xa, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0xffffffffffffff3f}], 0x1}, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400, 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0x7)

19:33:33 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2000, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:33 executing program 4:
socket$inet(0x10, 0x3, 0xc)

[ 2674.698227] binder: 3705:3707 ioctl c0306201 200001c0 returned -14
19:33:33 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]})

19:33:33 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2674.740567] binder_alloc: binder_alloc_mmap_handler: 3705 20001000-20004000 already mapped failed -16
[ 2674.750291] binder: BINDER_SET_CONTEXT_MGR already set
[ 2674.755685] binder: 3705:3707 ioctl 40046207 0 returned -16
[ 2674.773414] binder: undelivered transaction 4290, process died.
19:33:33 executing program 1:
syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:33 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write(r3, &(0x7f0000001180)="240000001a0025f00485bc000400001c0a0b49ffed0000008000080008000200000000f8", 0x24)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:33 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
clock_gettime(0x0, &(0x7f0000003340)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f00000031c0)=[{{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/209, 0xd1}, {&(0x7f0000001240)=""/215, 0xd7}, {&(0x7f0000001340)=""/249, 0xf9}, {&(0x7f0000001440)=""/167, 0xa7}, {&(0x7f0000001500)=""/205, 0xcd}, {&(0x7f0000001600)=""/146, 0x92}], 0x8, &(0x7f0000001740)=""/161, 0xa1}, 0x2}, {{&(0x7f0000001800)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/20, 0x14}, {&(0x7f00000018c0)=""/94, 0x5e}, {&(0x7f0000001940)=""/239, 0xef}, {&(0x7f0000001a40)=""/149, 0x95}, {&(0x7f0000001b00)=""/236, 0xec}, {&(0x7f0000001c00)=""/42, 0x2a}], 0x6, &(0x7f0000001cc0)=""/171, 0xab}, 0x1}, {{&(0x7f0000001d80)=@ax25={{}, [@default, @default, @default, @remote, @bcast, @rose, @default, @null]}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001e00)=""/34, 0x22}, {&(0x7f0000001e40)=""/135, 0x87}], 0x2, &(0x7f0000001f40)=""/158, 0x9e}, 0x2}, {{&(0x7f0000002000)=@tipc=@id, 0x80, &(0x7f0000002580)=[{&(0x7f0000002080)=""/66, 0x42}, {&(0x7f0000002100)=""/34, 0x22}, {&(0x7f0000002140)=""/80, 0x50}, {&(0x7f00000021c0)=""/167, 0xa7}, {&(0x7f0000002280)=""/205, 0xcd}, {&(0x7f0000002380)=""/219, 0xdb}, {&(0x7f0000002480)=""/174, 0xae}, {&(0x7f0000002540)=""/22, 0x16}], 0x8, &(0x7f0000002600)=""/226, 0xe2}, 0x331c4e5b}, {{&(0x7f0000002700)=@tipc, 0x33f, &(0x7f0000002e00)=[{&(0x7f0000002780)=""/106, 0x6a}, {&(0x7f0000002800)=""/99, 0x63}, {&(0x7f0000002880)=""/232, 0xe8}, {&(0x7f0000002980)=""/171, 0xab}, {&(0x7f0000002a40)=""/12, 0xc}, {&(0x7f0000002a80)=""/48, 0x30}, {&(0x7f0000002ac0)=""/212, 0xd4}, {&(0x7f0000002bc0)=""/237, 0xed}, {&(0x7f0000002cc0)=""/137, 0x89}, {&(0x7f0000002d80)=""/66, 0x42}], 0xa, &(0x7f0000002ec0)=""/189, 0xbd}}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000002f80)=""/244, 0xf4}, {&(0x7f0000003080)=""/224, 0xe0}], 0x2}, 0xaa17}], 0x6, 0x20, &(0x7f0000003380)={r1, r2+10000000})
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 2674.954712] binder: 3728:3729 ioctl c0306201 200001c0 returned -14
[ 2674.988821] validate_nla: 5 callbacks suppressed
[ 2674.988831] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2675.023029] binder: BINDER_SET_CONTEXT_MGR already set
[ 2675.028360] binder: 3728:3729 ioctl 40046207 0 returned -16
[ 2675.045266] binder_alloc: 3728: binder_alloc_buf, no vma
[ 2675.046375] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2675.050816] binder: 3728:3734 transaction failed 29189/-3, size 0-0 line 3035
[ 2675.050892] binder: 3728:3734 ioctl c0306201 200001c0 returned -14
[ 2675.051396] binder: undelivered transaction 4292, process died.
[ 2675.359346] net_ratelimit: 21 callbacks suppressed
[ 2675.359353] protocol 88fb is buggy, dev hsr_slave_0
[ 2675.369436] protocol 88fb is buggy, dev hsr_slave_1
19:33:34 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)

19:33:34 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:34 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]})

19:33:34 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0)

19:33:34 executing program 4:
r0 = socket$inet(0x10, 0x800000000003, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xc3, 0x8400)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000001180)=0x9, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
getdents(r1, &(0x7f0000000180)=""/4096, 0x1000)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x4, 0x12, 0x8, "fcf9706a4ac71082309870e546de0ed0e0407af3798da3f55560b566f64e426de1ef8cfbebb9b9a3d8d27870f7339bb6fcd8239003a71e211d32ed073b3e8f17", "1915cb96e4dc3199be89f838096b0daa9a2577d9053851d8c6edf25dc005eea1463cc26cca87588f10ae6d19f3e8e732e7f8cd049fa714a5fa0babf7ac7f8ef3", "68fa0d7122fbde434558fc5aac47727cf0cc4ea2ff9ac2cadc07e95574523a4a", [0x4, 0x5a0000000000]})

19:33:34 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x802)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xf6, 0x0)
epoll_create(0x7fffffff)
ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040faffffffffffffff00000000000000000000000005000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2675.762591] binder: 3743:3744 got transaction to invalid handle
[ 2675.767225] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2675.768706] binder: 3743:3744 transaction failed 29201/-22, size 0-0 line 2896
[ 2675.768750] binder: 3743:3744 ioctl c0306201 200001c0 returned -14
[ 2675.788378] binder_alloc: binder_alloc_mmap_handler: 3743 20001000-20004000 already mapped failed -16
19:33:34 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240))

19:33:34 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]})

[ 2675.821853] binder: BINDER_SET_CONTEXT_MGR already set
19:33:34 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2675.861973] binder: 3743:3753 ioctl 40046207 0 returned -16
[ 2675.896847] binder: 3743:3744 got transaction to invalid handle
[ 2675.909101] vhci_hcd: default hub control req: 0000 v0000 i0000 l0
[ 2675.923407] binder: 3743:3744 transaction failed 29201/-22, size 0-0 line 2896
[ 2675.942157] netlink: 'syz-executor4': attribute type 3 has an invalid length.
19:33:34 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]})

[ 2675.956787] binder: 3743:3744 ioctl c0306201 200001c0 returned -14
19:33:34 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x4)
r2 = syz_open_dev$binder(0x0, 0x0, 0x7fe)
r3 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000001aae2053f3acb9ecb4c98b033000f7ffffff00000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x410240, 0x0)

19:33:34 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2676.156692] binder: 3774:3775 transaction failed 29189/-22, size 0-0 line 2896
[ 2676.166052] binder: 3774:3775 ioctl c0306201 200001c0 returned -14
[ 2676.178242] binder: 3774:3776 transaction failed 29189/-22, size 0-0 line 2896
[ 2676.190548] binder: 3774:3776 ioctl c0306201 200001c0 returned -14
[ 2676.399389] protocol 88fb is buggy, dev hsr_slave_0
[ 2676.399461] protocol 88fb is buggy, dev hsr_slave_0
[ 2676.404524] protocol 88fb is buggy, dev hsr_slave_1
[ 2676.409643] protocol 88fb is buggy, dev hsr_slave_1
[ 2676.419758] protocol 88fb is buggy, dev hsr_slave_0
[ 2676.424814] protocol 88fb is buggy, dev hsr_slave_1
19:33:35 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0)

19:33:35 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240))

19:33:35 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x1eb, &(0x7f0000000000)=[{&(0x7f0000000080)="24000000130a0703391dfffd946fa2830020200a000900036f001da14b0c1baba20400ff7e", 0x25}], 0x1}, 0x800)
accept4(r0, 0x0, 0x0, 0x80000)

19:33:35 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]})

19:33:35 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:35 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x80000003, &(0x7f0000000040)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4080, 0x0)
write$P9_RFLUSH(r3, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000020000000000000000000000000000000000005000000000000000000000040000080000000000033a4f15ad649", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2676.801009] vhci_hcd: default hub control req: 0000 v0000 i0000 l0
[ 2676.808499] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'.
[ 2676.822119] binder: 3784:3790 got transaction to invalid handle
19:33:35 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:35 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]})

[ 2676.842187] binder: 3784:3790 transaction failed 29201/-22, size 2147483712-20783359389348608 line 2896
[ 2676.865670] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'.
[ 2676.889473] binder: 3784:3790 ioctl c0306201 200001c0 returned -14
19:33:35 executing program 1:
getrandom(0x0, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2676.909840] binder_alloc: binder_alloc_mmap_handler: 3784 20001000-20004000 already mapped failed -16
19:33:35 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000240)=0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={<r3=>0x0, 0x1ff}, &(0x7f00000000c0)=0x8)
getsockname(r1, &(0x7f0000000280)=@alg, &(0x7f0000000300)=0x80)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r3, 0x401}, 0x8)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept4(r2, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000040)=0x80, 0x80800)

[ 2676.959416] protocol 88fb is buggy, dev hsr_slave_0
[ 2676.964557] protocol 88fb is buggy, dev hsr_slave_1
[ 2676.978849] binder: BINDER_SET_CONTEXT_MGR already set
19:33:35 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:35 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]})

[ 2677.021249] binder: 3784:3790 ioctl 40046207 0 returned -16
[ 2677.047300] binder: 3784:3808 got transaction to invalid handle
[ 2677.080477] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2677.089981] binder: 3784:3808 transaction failed 29201/-22, size 2147483712-20783359389348608 line 2896
[ 2677.142587] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2677.166408] binder: 3784:3808 ioctl c0306201 200001c0 returned -14
19:33:36 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0)

19:33:36 executing program 1:
getrandom(0x0, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:36 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]})

19:33:36 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:36 executing program 4:
r0 = socket$inet(0x10, 0x8000f, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@ipv4={[], [], @remote}, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syz_tun\x00', r2})
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x5, 0x8, 0x8, 0x955, 0xa2, 0x9, 0xfff, 0xc014, 0xfb76, 0x2, 0x1}, 0xb)

19:33:36 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000000, 0x20015, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000240))

[ 2677.794649] binder: 3827:3831 unknown command 1079796480
[ 2677.832114] binder: 3827:3831 ioctl c0306201 200001c0 returned -22
19:33:36 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]})

[ 2677.848672] binder: BINDER_SET_CONTEXT_MGR already set
[ 2677.860348] binder: 3827:3841 ioctl 40046207 0 returned -16
[ 2677.881158] binder: 3827:3831 unknown command 1079796480
19:33:36 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x8)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={<r1=>0x0}, &(0x7f0000000080)=0xc)
ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000100)=0x5)
sched_getaffinity(r1, 0x8, &(0x7f00000000c0))
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2, 0x0)

19:33:36 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2677.897323] binder: 3827:3831 ioctl c0306201 200001c0 returned -22
19:33:36 executing program 1:
getrandom(0x0, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:36 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})
r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000080)={0xdc2, [0x4, 0x80000001, 0x1, 0x9, 0x4, 0xa, 0x6, 0xd4, 0xff, 0x5, 0x3, 0x0, 0x3, 0x8, 0x100000000, 0xffffffffffff7f1c, 0x1, 0x1, 0x5, 0xe40, 0x6932, 0xffffffffffff0000, 0x0, 0x7, 0xffff, 0x2, 0x80000000, 0x3, 0x974, 0x101, 0x80000001, 0x2, 0x8001, 0x4, 0x10001, 0x6, 0xa5, 0x1f, 0x7, 0x1, 0x5, 0x5, 0x8, 0x3, 0x9a9b91, 0x4, 0x9, 0xfffffffffffffffb], 0x7})

19:33:36 executing program 2:
syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2678.108008] binder: 3858:3859 ioctl c0306201 200001c0 returned -14
[ 2678.152086] binder_alloc: binder_alloc_mmap_handler: 3858 20001000-20004000 already mapped failed -16
[ 2678.168466] binder: BINDER_SET_CONTEXT_MGR already set
[ 2678.184888] binder: 3858:3859 ioctl 40046207 0 returned -16
[ 2678.193870] binder_alloc: 3858: binder_alloc_buf, no vma
[ 2678.207325] binder: 3858:3868 transaction failed 29189/-3, size 0-0 line 3035
[ 2678.230725] binder: undelivered transaction 4304, process died.
[ 2678.249132] binder: 3858:3868 ioctl c0306201 200001c0 returned -14
19:33:37 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0)

19:33:37 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]})

19:33:37 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x8, 0x3, 0x7, 0x2})
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2000, 0x0)
ioctl$TIOCSTI(r2, 0x5412, 0x2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000080)={0x160, 0x1, 0x3, {}, 0x1, 0x800})
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:33:37 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0)

19:33:37 executing program 1:
getrandom(0x0, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:37 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00')
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:37 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240))

[ 2678.925139] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2678.964726] binder: 3882:3887 ioctl c0306201 200001c0 returned -14
19:33:37 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]})

19:33:37 executing program 1:
getrandom(0x0, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2678.999202] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2679.009528] binder_alloc: binder_alloc_mmap_handler: 3882 20001000-20004000 already mapped failed -16
[ 2679.038296] vhci_hcd: default hub control req: 0000 v0000 i0000 l0
[ 2679.052946] binder: BINDER_SET_CONTEXT_MGR already set
19:33:37 executing program 4:
r0 = socket$inet(0x10, 0xfffffffffffffffc, 0xc)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0xfffffffffffffe73}], 0x1, 0x0, 0x36f}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:33:37 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})

[ 2679.082623] binder: 3882:3894 ioctl 40046207 0 returned -16
[ 2679.122149] binder: undelivered transaction 4307, process died.
19:33:37 executing program 2:
getrandom(0x0, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000080)={0xfffffffffffffff8, 0x6})
ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:38 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0)

19:33:38 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000580)={'IDLETIMER\x00'}, &(0x7f0000000540)=0xffffffffffffff4a)
ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000080)=0x5)
getsockopt$inet6_dccp_buf(r3, 0x21, 0x0, &(0x7f0000000200)=""/164, &(0x7f00000002c0)=0xa4)
ioctl$RTC_VL_CLR(r3, 0x7014)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000020005000000000000000000008000000000000000000000c4000000000000000000000d3b894f1c7d65a15b09548569ed413f39c4dd7588707ecb719b8256e94869178af24538ab70b41a5676742e68d821d4fcfd60cc6bb17d96d455dbfd2403948c135f4ff85dae07a3b618", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000300)=0xe8)
fsetxattr$security_capability(r0, &(0x7f0000000180)='security.capability\x00', &(0x7f0000000340)=@v3={0x3000000, [{0x2, 0x9a3}, {0x3, 0xffffffffffffffe0}], r4}, 0x18, 0x2)

19:33:38 executing program 1:
getrandom(0x0, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:38 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x13f, 0x1000}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r2, 0xa}}, 0x10)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:33:38 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]})

19:33:38 executing program 2 (fault-call:2 fault-nth:0):
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2679.999527] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2680.001570] FAULT_INJECTION: forcing a failure.
[ 2680.001570] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2680.032392] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2680.033396] binder: 3934:3937 unknown command 0
[ 2680.053853] binder: 3934:3937 ioctl c0306201 200001c0 returned -22
[ 2680.069689] CPU: 0 PID: 3936 Comm: syz-executor2 Not tainted 4.20.0+ #7
[ 2680.076457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2680.078796] binder_alloc: binder_alloc_mmap_handler: 3934 20001000-20004000 already mapped failed -16
[ 2680.085814] Call Trace:
[ 2680.085838]  dump_stack+0x1db/0x2d0
[ 2680.085859]  ? dump_stack_print_info.cold+0x20/0x20
[ 2680.085890]  should_fail.cold+0xa/0x15
[ 2680.085911]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2680.085937]  ? arch_local_save_flags+0x50/0x50
[ 2680.085951]  ? lock_release+0xc40/0xc40
[ 2680.085989]  should_fail_alloc_page+0x50/0x60
[ 2680.086005]  __alloc_pages_nodemask+0x323/0xdc0
[ 2680.086020]  ? find_held_lock+0x35/0x120
[ 2680.086053]  ? __alloc_pages_slowpath+0x2cc0/0x2cc0
[ 2680.086088]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 2680.086217]  ? usbfs_increase_memory_usage+0xee/0x1c0
[ 2680.097677] binder: BINDER_SET_CONTEXT_MGR already set
[ 2680.098059]  ? usbfs_decrease_memory_usage+0x30/0x30
[ 2680.098078]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2680.098102]  alloc_pages_current+0x107/0x210
[ 2680.101813] binder: 3934:3943 ioctl 40046207 0 returned -16
[ 2680.106720]  ? check_ctrlrecip+0xab/0x320
[ 2680.106744]  __get_free_pages+0xc/0x40
[ 2680.106761]  proc_control+0x250/0xf50
[ 2680.110849] binder: 3934:3937 unknown command 0
[ 2680.115734]  ? __lock_acquire+0x572/0x4a30
[ 2680.115757]  ? proc_bulk+0xa50/0xa50
[ 2680.115778]  ? check_preemption_disabled+0x48/0x290
[ 2680.121746] binder: 3934:3937 ioctl c0306201 200001c0 returned -22
[ 2680.124346]  usbdev_do_ioctl+0x1f9f/0x38c0
[ 2680.124373]  ? processcompl_compat+0x680/0x680
[ 2680.124391]  ? debug_smp_processor_id+0x1c/0x20
[ 2680.158028]  ? perf_trace_lock_acquire+0x138/0x7d0
[ 2680.168666]  ? get_pid_task+0xd4/0x190
[ 2680.168687]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2680.168702]  ? perf_trace_lock+0x750/0x750
[ 2680.168720]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2680.251452]  ? __fget+0x472/0x710
[ 2680.254925]  ? find_held_lock+0x35/0x120
[ 2680.258999]  ? __fget+0x472/0x710
[ 2680.259021]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2680.259053]  ? lock_downgrade+0x910/0x910
[ 2680.259070]  ? kasan_check_read+0x11/0x20
[ 2680.268064]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2680.268086]  ? rcu_read_unlock_special+0x380/0x380
[ 2680.268112]  ? __fget+0x499/0x710
[ 2680.290053]  usbdev_ioctl+0x26/0x30
[ 2680.293696]  ? usbdev_compat_ioctl+0x30/0x30
[ 2680.298121]  do_vfs_ioctl+0x107b/0x17d0
[ 2680.302118]  ? wait_for_completion+0x810/0x810
[ 2680.306725]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2680.311150]  ? __fget_light+0x2db/0x420
[ 2680.315142]  ? fget_raw+0x20/0x20
[ 2680.318611]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2680.324168]  ? fput+0x128/0x1a0
[ 2680.327463]  ? do_syscall_64+0x8c/0x800
[ 2680.331456]  ? do_syscall_64+0x8c/0x800
[ 2680.335444]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2680.340059]  ? security_file_ioctl+0x93/0xc0
[ 2680.344486]  ksys_ioctl+0xab/0xd0
[ 2680.347956]  __x64_sys_ioctl+0x73/0xb0
19:33:38 executing program 1:
getrandom(0x0, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:38 executing program 1:
getrandom(0x0, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:38 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x800)
syz_extract_tcp_res(&(0x7f0000000040), 0x1000, 0x10001)
syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x90b0, 0x4000)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x47b6, 0x111000)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000405db5871f083cadfe7620ee000000000000000000050000555947a6d0e8", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2680.351860]  do_syscall_64+0x1a3/0x800
[ 2680.355769]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2680.358208] binder: 3954:3955 transaction failed 29189/-22, size -3411961218682847227-137439084776 line 2896
[ 2680.360721]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2680.360747]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2680.360775]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2680.360789] RIP: 0033:0x457ec9
19:33:39 executing program 2 (fault-call:2 fault-nth:1):
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:39 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040))

19:33:39 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]})

[ 2680.360805] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2680.360814] RSP: 002b:00007f04cd2bbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2680.371061] binder: 3954:3955 ioctl c0306201 200001c0 returned -14
[ 2680.375799] RAX: ffffffffffffffda RBX: 00007f04cd2bbc90 RCX: 0000000000457ec9
[ 2680.375809] RDX: 0000000020000240 RSI: 00000000c0185500 RDI: 0000000000000003
[ 2680.375817] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2680.375827] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04cd2bc6d4
[ 2680.375837] R13: 00000000004c03e8 R14: 00000000004d1ae0 R15: 0000000000000004
[ 2680.468377] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2680.484633] FAULT_INJECTION: forcing a failure.
[ 2680.484633] name failslab, interval 1, probability 0, space 0, times 0
[ 2680.491573] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2680.559377] net_ratelimit: 14 callbacks suppressed
[ 2680.559385] protocol 88fb is buggy, dev hsr_slave_0
[ 2680.559459] protocol 88fb is buggy, dev hsr_slave_0
[ 2680.564414] protocol 88fb is buggy, dev hsr_slave_1
[ 2680.569528] protocol 88fb is buggy, dev hsr_slave_1
[ 2680.584695] protocol 88fb is buggy, dev hsr_slave_0
[ 2680.586592] CPU: 1 PID: 3962 Comm: syz-executor2 Not tainted 4.20.0+ #7
[ 2680.589799] protocol 88fb is buggy, dev hsr_slave_1
[ 2680.596471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2680.596479] Call Trace:
[ 2680.613430]  dump_stack+0x1db/0x2d0
[ 2680.617086]  ? dump_stack_print_info.cold+0x20/0x20
[ 2680.622119]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2680.627082]  should_fail.cold+0xa/0x15
[ 2680.630991]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2680.636118]  ? ___might_sleep+0x1e7/0x310
[ 2680.640285]  ? arch_local_save_flags+0x50/0x50
[ 2680.644876]  ? lock_downgrade+0x910/0x910
[ 2680.649031]  ? rcu_read_lock_sched_held+0x110/0x130
[ 2680.654095]  __should_failslab+0x121/0x190
[ 2680.658349]  should_failslab+0x9/0x14
[ 2680.662162]  kmem_cache_alloc_trace+0x2d1/0x760
[ 2680.666847]  ? kasan_check_write+0x14/0x20
[ 2680.671096]  ? __mutex_unlock_slowpath+0x195/0x870
[ 2680.676056]  usb_control_msg+0xce/0x570
[ 2680.680064]  ? usb_start_wait_urb+0x370/0x370
[ 2680.684572]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2680.690140]  proc_control+0x5ec/0xf50
[ 2680.693968]  ? proc_bulk+0xa50/0xa50
[ 2680.697697]  ? check_preemption_disabled+0x48/0x290
[ 2680.702744]  usbdev_do_ioctl+0x1f9f/0x38c0
[ 2680.707002]  ? processcompl_compat+0x680/0x680
[ 2680.711588]  ? debug_smp_processor_id+0x1c/0x20
[ 2680.716259]  ? perf_trace_lock_acquire+0x138/0x7d0
[ 2680.721194]  ? get_pid_task+0xd4/0x190
[ 2680.725081]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2680.730187]  ? perf_trace_lock+0x750/0x750
[ 2680.734425]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2680.739966]  ? __fget+0x472/0x710
[ 2680.743428]  ? find_held_lock+0x35/0x120
[ 2680.747488]  ? __fget+0x472/0x710
[ 2680.750944]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2680.756484]  ? lock_downgrade+0x910/0x910
[ 2680.760632]  ? kasan_check_read+0x11/0x20
[ 2680.764783]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2680.770076]  ? rcu_read_unlock_special+0x380/0x380
[ 2680.775026]  ? __fget+0x499/0x710
[ 2680.778517]  usbdev_ioctl+0x26/0x30
[ 2680.782161]  ? usbdev_compat_ioctl+0x30/0x30
[ 2680.786570]  do_vfs_ioctl+0x107b/0x17d0
[ 2680.790547]  ? wait_for_completion+0x810/0x810
[ 2680.795133]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2680.799546]  ? __fget_light+0x2db/0x420
[ 2680.803521]  ? fget_raw+0x20/0x20
[ 2680.806965]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2680.812509]  ? fput+0x128/0x1a0
[ 2680.815791]  ? do_syscall_64+0x8c/0x800
[ 2680.819769]  ? do_syscall_64+0x8c/0x800
[ 2680.823749]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2680.828325]  ? security_file_ioctl+0x93/0xc0
[ 2680.832737]  ksys_ioctl+0xab/0xd0
[ 2680.836193]  __x64_sys_ioctl+0x73/0xb0
[ 2680.840095]  do_syscall_64+0x1a3/0x800
[ 2680.843997]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2680.848926]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2680.853934]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2680.858788]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2680.864489] RIP: 0033:0x457ec9
[ 2680.867681] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2680.886568] RSP: 002b:00007f04cd2bbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2680.894260] RAX: ffffffffffffffda RBX: 00007f04cd2bbc90 RCX: 0000000000457ec9
[ 2680.901524] RDX: 0000000020000240 RSI: 00000000c0185500 RDI: 0000000000000003
[ 2680.908914] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2680.916168] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04cd2bc6d4
[ 2680.923421] R13: 00000000004c03e8 R14: 00000000004d1ae0 R15: 0000000000000004
19:33:39 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0)

19:33:39 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]})

19:33:39 executing program 1:
getrandom(0x0, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:39 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_crypto(0x10, 0x3, 0x15)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x101000, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000380)={0x10001, 0x28e, &(0x7f0000000180)="e63f7bfe6b429a87", &(0x7f0000000280)="bce20ffa725bc03c785ec2c6feda04bdc0698f601f3864fd2e0b17a4cfe19d05e9de8df3a6e180a6745f3e90c05f4a6daa338063a0fd65e664ac8d3d68d683dd7623b27c1e76e03f52701b6ed1b8ce6bdb66bdfb55e01e9d691e573d60d149a303cf522402829aec56fbee57ac4174e58edc596691762c44d30bd42f1d5716e0a2b862e3183d2d74735d6237907c66a20937ceb3cf36966ca1b9fb007852d9a7cd84407525719beb0a0f86aca7466c2a2fbed49effe38cc847f793c155f59062ffb6630100", 0x8, 0xc5})
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000100)={{0x11, @remote, 0x4e22, 0x3, 'sh\x00', 0x3, 0x400, 0x7b}, {@empty, 0x4e24, 0x0, 0x400, 0x0, 0x1}}, 0x44)
write$P9_RLOCK(r3, &(0x7f00000000c0)={0x8, 0x35, 0x2, 0x2}, 0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00634040fc4ebec58072ff0f00000051e2283c000000000000000005b6964b000000000000000000000000000000007f444002cf498300", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:39 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
r1 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x2000)=nil, 0x3000)
shmdt(r1)
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2)
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x80000)
getpeername$tipc(r2, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:33:39 executing program 2 (fault-call:2 fault-nth:2):
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2681.109778] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2681.113268] FAULT_INJECTION: forcing a failure.
[ 2681.113268] name failslab, interval 1, probability 0, space 0, times 0
[ 2681.122192] binder: 3980:3981 got transaction to invalid handle
19:33:39 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]})

[ 2681.151592] CPU: 1 PID: 3978 Comm: syz-executor2 Not tainted 4.20.0+ #7
[ 2681.158382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2681.167737] Call Trace:
[ 2681.170343]  dump_stack+0x1db/0x2d0
[ 2681.173990]  ? dump_stack_print_info.cold+0x20/0x20
[ 2681.178363] binder: 3980:3981 transaction failed 29201/-22, size 0--3530188494972387328 line 2896
[ 2681.179019]  ? ksys_ioctl+0xab/0xd0
[ 2681.191531] binder: 3980:3981 ioctl c0306201 200001c0 returned -14
[ 2681.191656]  ? __x64_sys_ioctl+0x73/0xb0
[ 2681.191674]  ? do_syscall_64+0x1a3/0x800
[ 2681.191692]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2681.191717]  should_fail.cold+0xa/0x15
[ 2681.200172] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2681.202086]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2681.202108]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2681.202132]  ? ___might_sleep+0x1e7/0x310
[ 2681.213996] binder_alloc: binder_alloc_mmap_handler: 3980 20001000-20004000 already mapped failed -16
[ 2681.215428]  ? arch_local_save_flags+0x50/0x50
19:33:39 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0), 0x0, 0x0, 0xfffffffffffffe8a}, 0xfffffffffffffffe)
r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8001, 0x400)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e22, 0x8, @empty, 0x3}, {0xa, 0x4e21, 0x100000001, @remote}, 0xfffffffffffffffa, [0x7, 0x3, 0x0, 0x19bc0000000000, 0x40000000000000, 0x8, 0x6, 0x5920]}, 0x5c)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:33:39 executing program 1:
getrandom(0x0, 0x0, 0x0)
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2681.215445]  ? usb_control_msg+0xce/0x570
[ 2681.215466]  ? rcu_lockdep_current_cpu_online+0x1aa/0x220
[ 2681.215493]  __should_failslab+0x121/0x190
[ 2681.235415] binder: BINDER_SET_CONTEXT_MGR already set
[ 2681.237520]  should_failslab+0x9/0x14
[ 2681.237538]  __kmalloc+0x2dc/0x740
[ 2681.237555]  ? rcu_read_lock_sched_held+0x110/0x130
[ 2681.237572]  ? kmem_cache_alloc_trace+0x354/0x760
[ 2681.237595]  ? kasan_check_write+0x14/0x20
[ 2681.237615]  ? usb_alloc_urb+0x24/0x50
[ 2681.255677]  usb_alloc_urb+0x24/0x50
[ 2681.278010]  usb_control_msg+0x1f3/0x570
[ 2681.278030]  ? usb_start_wait_urb+0x370/0x370
[ 2681.278054]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2681.278083]  proc_control+0x5ec/0xf50
[ 2681.278112]  ? proc_bulk+0xa50/0xa50
[ 2681.278132]  ? check_preemption_disabled+0x48/0x290
[ 2681.302856] binder: 3980:3991 ioctl 40046207 0 returned -16
[ 2681.303880]  usbdev_do_ioctl+0x1f9f/0x38c0
[ 2681.303908]  ? processcompl_compat+0x680/0x680
[ 2681.303928]  ? debug_smp_processor_id+0x1c/0x20
[ 2681.313955]  ? perf_trace_lock_acquire+0x138/0x7d0
[ 2681.313976]  ? get_pid_task+0xd4/0x190
[ 2681.313995]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2681.314010]  ? perf_trace_lock+0x750/0x750
[ 2681.326528]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2681.326552]  ? __fget+0x472/0x710
[ 2681.326570]  ? find_held_lock+0x35/0x120
[ 2681.326587]  ? __fget+0x472/0x710
[ 2681.326605]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2681.326625]  ? lock_downgrade+0x910/0x910
[ 2681.336555]  ? kasan_check_read+0x11/0x20
[ 2681.336575]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2681.336595]  ? rcu_read_unlock_special+0x380/0x380
[ 2681.336624]  ? __fget+0x499/0x710
[ 2681.336657]  usbdev_ioctl+0x26/0x30
[ 2681.336675]  ? usbdev_compat_ioctl+0x30/0x30
[ 2681.345917]  do_vfs_ioctl+0x107b/0x17d0
[ 2681.345939]  ? wait_for_completion+0x810/0x810
[ 2681.345960]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2681.345981]  ? __fget_light+0x2db/0x420
[ 2681.345999]  ? fget_raw+0x20/0x20
[ 2681.346022]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2681.351593] binder: 3980:3991 got transaction to invalid handle
[ 2681.354839]  ? fput+0x128/0x1a0
19:33:40 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})

19:33:40 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1, &(0x7f0000000140)="0adc1f425b26434cead9a0b3bdff31d9bff0c5023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000))
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300), 0x3a, 0x20000240, &(0x7f0000000040)="bdfebcfeac740ba9d9b58ccf22868bc302fa43015eef77f577b346dc56a481cc714547941412ae1e2ea4eb802c8c7e5a8c34cb9a0b98c875673c"})

[ 2681.354858]  ? do_syscall_64+0x8c/0x800
[ 2681.354874]  ? do_syscall_64+0x8c/0x800
[ 2681.354892]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2681.378844] binder: 3980:3991 transaction failed 29201/-22, size 0--3530188494972387328 line 2896
[ 2681.380543]  ? security_file_ioctl+0x93/0xc0
[ 2681.380566]  ksys_ioctl+0xab/0xd0
[ 2681.380588]  __x64_sys_ioctl+0x73/0xb0
[ 2681.380610]  do_syscall_64+0x1a3/0x800
[ 2681.380630]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2681.380650]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2681.380674]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2681.380699]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2681.391141] binder: 3980:3991 ioctl c0306201 200001c0 returned -14
[ 2681.394506] RIP: 0033:0x457ec9
[ 2681.394525] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2681.394534] RSP: 002b:00007f04cd2bbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2681.394551] RAX: ffffffffffffffda RBX: 00007f04cd2bbc90 RCX: 0000000000457ec9
19:33:40 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]})

[ 2681.394560] RDX: 0000000020000240 RSI: 00000000c0185500 RDI: 0000000000000003
[ 2681.394569] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2681.394581] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04cd2bc6d4
[ 2681.573871] R13: 00000000004c03e8 R14: 00000000004d1ae0 R15: 0000000000000004
19:33:40 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0)

19:33:40 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x7ff, 0x7fffffff, 0x5, 0xc0, 0x0, 0x8, 0x5000, 0x8, 0x3fc000000000, 0x0, 0xffff, 0x5a05, 0x4, 0x0, 0x100, 0xffff, 0x9, 0x1bd4fe8e, 0x3, 0x1000, 0x81, 0xfffffffffffffff7, 0x0, 0x4, 0x80000000, 0x5a21, 0x20, 0x1000, 0x7f, 0x8, 0x8, 0x8, 0x7, 0x9, 0x3, 0x3, 0x0, 0x81, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x1c000, 0x3, 0xc8, 0x4, 0x4, 0x9, 0xffffffffffffffb2}, 0xffffffffffffffff, 0x7, r1, 0x0)
r4 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x5, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100812, r4, 0x180000000)
syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x11, r3, 0x44)
setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000200)=0x1, 0x4)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000005000000000000c6c5b479830000000000000000000000000000000068", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:40 executing program 4:
seccomp(0x1, 0x1, &(0x7f00000010c0)={0x2, &(0x7f0000001080)=[{0x7, 0xf8000000, 0x5, 0x54c}, {0xfffffffffffffffe, 0x3, 0x3, 0x2}]})
r0 = syz_open_dev$media(&(0x7f0000001100)='/dev/media#\x00', 0xfef1, 0x10000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000001140)={<r1=>0x0, @in6={{0xa, 0x4e22, 0x3, @mcast2, 0xff}}, [0x2, 0x65, 0x2, 0x2, 0x8, 0x7fff, 0x6, 0x6d, 0xfffffffffffffffe, 0x80, 0x200, 0x8001, 0x101, 0x4, 0x1]}, &(0x7f0000001240)=0x100)
r2 = getuid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, <r3=>0x0}, &(0x7f00000013c0)=0xc)
fchownat(r0, &(0x7f0000001340)='./file0\x00', r2, r3, 0x900)
ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000001300))
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000001280)=@assoc_value={r1, 0x6c91}, 0x8)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000001440)={0x5, 0x3ff, 0x6, 0xfffffffffffffffe, 0xf5, 0xf88})
r4 = socket$inet(0x10, 0x3, 0xc)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000012c0)=@sack_info={r1, 0x4, 0x1}, 0xc)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000001400)=@sack_info={r1, 0x3ff, 0xfff}, 0xc)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r5 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x800, 0x18001)
ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f0000000080)=""/4096)
socket$bt_hidp(0x1f, 0x3, 0x6)

19:33:40 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:40 executing program 2 (fault-call:2 fault-nth:3):
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:40 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]})

[ 2682.190192] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2682.207525] FAULT_INJECTION: forcing a failure.
[ 2682.207525] name failslab, interval 1, probability 0, space 0, times 0
[ 2682.243283] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2682.259343] binder: 4026:4027 got transaction to context manager from process owning it
[ 2682.261368] CPU: 1 PID: 4019 Comm: syz-executor2 Not tainted 4.20.0+ #7
[ 2682.274273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2682.283631] Call Trace:
[ 2682.286231]  dump_stack+0x1db/0x2d0
19:33:40 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(0x0, 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2682.287789] binder: 4026:4027 transaction failed 29201/-22, size 0-0 line 2887
[ 2682.289869]  ? dump_stack_print_info.cold+0x20/0x20
[ 2682.289891]  ? usb_hcd_link_urb_to_ep+0x3c7/0x540
[ 2682.289909]  ? find_held_lock+0x35/0x120
[ 2682.289933]  should_fail.cold+0xa/0x15
[ 2682.289953]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2682.289978]  ? ___might_sleep+0x1e7/0x310
[ 2682.289996]  ? arch_local_save_flags+0x50/0x50
[ 2682.290016]  ? _raw_spin_unlock_irq+0x28/0x90
[ 2682.302397]  __should_failslab+0x121/0x190
[ 2682.311274]  should_failslab+0x9/0x14
[ 2682.311290]  __kmalloc+0x2dc/0x740
[ 2682.311316]  ? usb_hcd_submit_urb+0x6b5/0x20a0
[ 2682.311338]  usb_hcd_submit_urb+0x6b5/0x20a0
[ 2682.320278] binder: 4026:4027 ioctl c0306201 200001c0 returned -14
[ 2682.320309]  ? usbdev_ioctl+0x26/0x30
[ 2682.334402] binder: BINDER_SET_CONTEXT_MGR already set
[ 2682.337727]  ? do_vfs_ioctl+0x107b/0x17d0
[ 2682.337743]  ? ksys_ioctl+0x53/0xd0
[ 2682.337761]  ? do_syscall_64+0x110/0x800
[ 2682.337784]  ? usb_create_hcd+0x40/0x40
[ 2682.337810]  ? add_lock_to_list.isra.0+0x450/0x450
19:33:41 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})

[ 2682.357082] binder_alloc: 4026: binder_alloc_buf, no vma
[ 2682.360413]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2682.360431]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2682.360448]  ? lockdep_init_map+0x10c/0x5b0
[ 2682.360465]  ? lockdep_init_map+0x10c/0x5b0
[ 2682.360493]  usb_submit_urb+0x6f0/0x1400
[ 2682.360519]  usb_start_wait_urb+0x154/0x370
[ 2682.360535]  ? sg_clean+0x240/0x240
[ 2682.369264] binder: 4026:4032 transaction failed 29189/-3, size 0-0 line 3035
[ 2682.369630]  ? usb_init_urb+0x167/0x1e0
[ 2682.382782] binder: 4026:4027 ioctl 40046207 0 returned -16
19:33:41 executing program 4:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x18)
r1 = socket$inet(0x10, 0x3, 0xc)
fcntl$setlease(r1, 0x400, 0x1)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x4001, 0x0)
bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x2, 0xcda3, 0x1, 0x3}, 0x6)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 2682.385405]  ? kmem_cache_alloc_trace+0x354/0x760
[ 2682.385424]  ? kasan_check_write+0x14/0x20
[ 2682.385441]  ? usb_alloc_urb+0x24/0x50
[ 2682.385464]  usb_control_msg+0x353/0x570
[ 2682.390622] binder: 4026:4032 ioctl c0306201 200001c0 returned -14
[ 2682.395836]  ? usb_start_wait_urb+0x370/0x370
[ 2682.395853]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2682.395884]  proc_control+0x5ec/0xf50
[ 2682.395911]  ? proc_bulk+0xa50/0xa50
[ 2682.423415]  ? check_preemption_disabled+0x48/0x290
[ 2682.434320]  usbdev_do_ioctl+0x1f9f/0x38c0
[ 2682.434346]  ? processcompl_compat+0x680/0x680
[ 2682.434368]  ? debug_smp_processor_id+0x1c/0x20
[ 2682.489843]  ? perf_trace_lock_acquire+0x138/0x7d0
[ 2682.489864]  ? get_pid_task+0xd4/0x190
[ 2682.489882]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2682.489896]  ? perf_trace_lock+0x750/0x750
[ 2682.489915]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2682.489937]  ? __fget+0x472/0x710
[ 2682.489954]  ? find_held_lock+0x35/0x120
[ 2682.489970]  ? __fget+0x472/0x710
[ 2682.489987]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
19:33:41 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="c7c4e1e8caeb8269d61bb2751f60eb0716f275d49e169a57685db0f00e60d704b341bf6625658bd92a81f68eafa9cf8e5ce700def4b1c5720a75fbeab93f5a60e6f17aefcd629a3b6487e05e3de9521a3421c4579911f2c8f0fcc730e573d9324db3bba8ce4d0f20b5ee7515beec5a3bcd6e7a654b30ec3159bfa75f", 0x7c)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0)
ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000100)={0xf, {0x401, 0x401, 0x74919f33, 0x3}})

[ 2682.490008]  ? lock_downgrade+0x910/0x910
[ 2682.490025]  ? kasan_check_read+0x11/0x20
[ 2682.490052]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2682.503518]  ? rcu_read_unlock_special+0x380/0x380
[ 2682.503547]  ? __fget+0x499/0x710
[ 2682.503580]  usbdev_ioctl+0x26/0x30
[ 2682.503600]  ? usbdev_compat_ioctl+0x30/0x30
[ 2682.503616]  do_vfs_ioctl+0x107b/0x17d0
[ 2682.527093] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2682.530531]  ? wait_for_completion+0x810/0x810
[ 2682.530556]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2682.530576]  ? __fget_light+0x2db/0x420
[ 2682.530594]  ? fget_raw+0x20/0x20
[ 2682.530613]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2682.530628]  ? fput+0x128/0x1a0
[ 2682.530647]  ? do_syscall_64+0x8c/0x800
[ 2682.530664]  ? do_syscall_64+0x8c/0x800
[ 2682.546736] netlink: 'syz-executor4': attribute type 3 has an invalid length.
[ 2682.547848]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2682.547871]  ? security_file_ioctl+0x93/0xc0
[ 2682.547893]  ksys_ioctl+0xab/0xd0
[ 2682.547914]  __x64_sys_ioctl+0x73/0xb0
[ 2682.547932]  do_syscall_64+0x1a3/0x800
[ 2682.606864]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2682.614108]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2682.614135]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2682.614162]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2682.639443] protocol 88fb is buggy, dev hsr_slave_0
[ 2682.641670] RIP: 0033:0x457ec9
[ 2682.641688] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
19:33:41 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400040, 0x0)
r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7fff, 0x42400)
r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x181403, 0x0)
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x2081, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x80, 0x0)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x20000, 0x0)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000200)={0x1, 0x5, [{r1, 0x0, 0x100000000, 0x1000}, {r2, 0x0, 0xfffffffffffff000, 0x1000101000000}, {r3, 0x0, 0x8ab06781a1345cc4, 0xfffffffffffff000}, {r4, 0x0, 0xfffffffffffff000, 0x100000000}, {r5, 0x0, 0xfffffffff0000000, 0xfffffffffffff000}]})
ioctl(r5, 0x1000008912, &(0x7f0000000380)="0adc1f023c123f3188a070")
r6 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00634000000000000000000000000000000000000000000500000000000000000000000000000000001000000000fcb181880e00993bcc2d98cf6fbb4a6f330503db751b1d7b6fb35ea17cac56b72b86d313e4c6fb3b0d8d62139022cc780661b4cd53bc894ddf9234181e3c83509d4492cb5fbb33349a05e5babc35be85885460784cadacc0920f75ec20590c55da19ad7eb125bc463fbd618a5f8336dca7e0db0ec94921b950b486f08814aae422988359cdf34452f06009b306cbdc80abba5d5bbd5fb359bc27e5dae55f", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:41 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(0x0, 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2682.641698] RSP: 002b:00007f04cd2bbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2682.641713] RAX: ffffffffffffffda RBX: 00007f04cd2bbc90 RCX: 0000000000457ec9
[ 2682.641723] RDX: 0000000020000240 RSI: 00000000c0185500 RDI: 0000000000000003
[ 2682.641735] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2682.645670] protocol 88fb is buggy, dev hsr_slave_1
[ 2682.650527] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04cd2bc6d4
[ 2682.650537] R13: 00000000004c03e8 R14: 00000000004d1ae0 R15: 0000000000000004
[ 2682.650993] protocol 88fb is buggy, dev hsr_slave_0
[ 2682.655692] protocol 88fb is buggy, dev hsr_slave_0
[ 2682.769890] binder: 4043:4044 unknown command 4219648
[ 2682.785209] binder: 4043:4044 ioctl c0306201 200001c0 returned -22
[ 2682.807950] binder_alloc: binder_alloc_mmap_handler: 4043 20001000-20004000 already mapped failed -16
[ 2682.827916] binder: BINDER_SET_CONTEXT_MGR already set
[ 2682.833489] binder: 4043:4051 ioctl 40046207 0 returned -16
19:33:41 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0)

19:33:41 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]})

19:33:41 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x800, 0x0)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0)={0x6fb}, 0x4)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
fallocate(r2, 0x35, 0xfffffffffffffe00, 0x8010000)
ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x2f, &(0x7f0000000100)=""/176, &(0x7f0000000200)=0xb0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x402000, 0x0)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:41 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x31e}], 0x1}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:33:41 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(0x0, 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:41 executing program 2 (fault-call:2 fault-nth:4):
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2683.300069] binder: 4061:4062 transaction failed 29189/-22, size 0-0 line 2896
[ 2683.318387] FAULT_INJECTION: forcing a failure.
[ 2683.318387] name failslab, interval 1, probability 0, space 0, times 0
[ 2683.327925] binder: 4061:4062 ioctl c0306201 200001c0 returned -14
[ 2683.346820] binder: 4061:4072 transaction failed 29189/-22, size 0-0 line 2896
[ 2683.357069] binder: 4061:4072 ioctl c0306201 200001c0 returned -14
[ 2683.357514] CPU: 0 PID: 4068 Comm: syz-executor2 Not tainted 4.20.0+ #7
[ 2683.370161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2683.379522] Call Trace:
[ 2683.382121]  dump_stack+0x1db/0x2d0
[ 2683.385761]  ? dump_stack_print_info.cold+0x20/0x20
[ 2683.390784]  ? save_stack+0x45/0xd0
[ 2683.390808]  ? kasan_kmalloc+0xcf/0xe0
[ 2683.390821]  ? __kmalloc+0x15c/0x740
[ 2683.390838]  ? usb_hcd_submit_urb+0x6b5/0x20a0
[ 2683.390852]  ? usb_start_wait_urb+0x154/0x370
[ 2683.390875]  should_fail.cold+0xa/0x15
[ 2683.390895]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2683.420159]  ? ___might_sleep+0x1e7/0x310
[ 2683.424330]  ? arch_local_save_flags+0x50/0x50
[ 2683.428927]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2683.434477]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2683.440069]  __should_failslab+0x121/0x190
[ 2683.444349]  should_failslab+0x9/0x14
[ 2683.447142] binder: 4076:4077 ioctl c0306201 200001c0 returned -14
[ 2683.448175]  kmem_cache_alloc_trace+0x2d1/0x760
[ 2683.448333]  wakeup_source_create+0x41/0xa0
[ 2683.448363]  device_wakeup_enable+0xb8/0x280
[ 2683.460466] binder_alloc: binder_alloc_mmap_handler: 4076 20001000-20004000 already mapped failed -16
[ 2683.463681]  device_set_wakeup_enable+0x2b/0x60
[ 2683.463704]  usb_hcd_submit_urb+0xfc0/0x20a0
[ 2683.463721]  ? usbdev_ioctl+0x26/0x30
[ 2683.463745]  ? usb_create_hcd+0x40/0x40
[ 2683.468340] binder: BINDER_SET_CONTEXT_MGR already set
[ 2683.477488]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2683.477506]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2683.477522]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2683.477539]  ? lockdep_init_map+0x10c/0x5b0
[ 2683.477556]  ? lockdep_init_map+0x10c/0x5b0
[ 2683.477582]  usb_submit_urb+0x6f0/0x1400
[ 2683.482401] binder: 4076:4079 ioctl 40046207 0 returned -16
[ 2683.486647]  usb_start_wait_urb+0x154/0x370
[ 2683.486666]  ? sg_clean+0x240/0x240
[ 2683.486681]  ? usb_init_urb+0x167/0x1e0
[ 2683.486706]  ? kmem_cache_alloc_trace+0x354/0x760
[ 2683.490846] binder_alloc: 4076: binder_alloc_buf, no vma
[ 2683.494454]  ? kasan_check_write+0x14/0x20
[ 2683.494472]  ? usb_alloc_urb+0x24/0x50
[ 2683.494496]  usb_control_msg+0x353/0x570
[ 2683.494516]  ? usb_start_wait_urb+0x370/0x370
[ 2683.500512] binder: 4076:4077 transaction failed 29189/-3, size 0-0 line 3035
[ 2683.504705]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2683.504737]  proc_control+0x5ec/0xf50
[ 2683.504769]  ? proc_bulk+0xa50/0xa50
[ 2683.509892] binder: 4076:4077 ioctl c0306201 200001c0 returned -14
[ 2683.515220]  ? check_preemption_disabled+0x48/0x290
[ 2683.515252]  usbdev_do_ioctl+0x1f9f/0x38c0
[ 2683.515277]  ? processcompl_compat+0x680/0x680
[ 2683.540127] binder: undelivered transaction 4320, process died.
[ 2683.541565]  ? debug_smp_processor_id+0x1c/0x20
[ 2683.541583]  ? perf_trace_lock_acquire+0x138/0x7d0
[ 2683.541603]  ? get_pid_task+0xd4/0x190
[ 2683.541624]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2683.637226]  ? perf_trace_lock+0x750/0x750
[ 2683.641472]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2683.647017]  ? __fget+0x472/0x710
[ 2683.650483]  ? find_held_lock+0x35/0x120
[ 2683.654551]  ? __fget+0x472/0x710
[ 2683.658013]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2683.663569]  ? lock_downgrade+0x910/0x910
[ 2683.667717]  ? kasan_check_read+0x11/0x20
[ 2683.671872]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2683.677153]  ? rcu_read_unlock_special+0x380/0x380
[ 2683.682098]  ? __fget+0x499/0x710
[ 2683.685572]  usbdev_ioctl+0x26/0x30
[ 2683.689203]  ? usbdev_compat_ioctl+0x30/0x30
[ 2683.693618]  do_vfs_ioctl+0x107b/0x17d0
[ 2683.697601]  ? wait_for_completion+0x810/0x810
[ 2683.702195]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2683.706609]  ? __fget_light+0x2db/0x420
[ 2683.710587]  ? fget_raw+0x20/0x20
[ 2683.714055]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2683.719600]  ? fput+0x128/0x1a0
[ 2683.722889]  ? do_syscall_64+0x8c/0x800
[ 2683.726865]  ? do_syscall_64+0x8c/0x800
[ 2683.730843]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2683.735437]  ? security_file_ioctl+0x93/0xc0
[ 2683.739852]  ksys_ioctl+0xab/0xd0
[ 2683.743318]  __x64_sys_ioctl+0x73/0xb0
[ 2683.747215]  do_syscall_64+0x1a3/0x800
[ 2683.751110]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2683.756055]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2683.761089]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2683.765950]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2683.771142] RIP: 0033:0x457ec9
[ 2683.774340] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2683.793247] RSP: 002b:00007f04cd2bbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
19:33:42 executing program 4 (fault-call:2 fault-nth:0):
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:42 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
unshare(0x4000400)
getsockopt$sock_int(r3, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000000c0)=0xa3e7179826871e09)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000008ba943131edf045d0afc8a43185150d3c47543fad7cc03384df9fd3a888a89af910998035c0dd628cdae4e79fa4720789c4c7a942e45476db4d960", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:42 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:42 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]})

19:33:42 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2683.800961] RAX: ffffffffffffffda RBX: 00007f04cd2bbc90 RCX: 0000000000457ec9
[ 2683.808230] RDX: 0000000020000240 RSI: 00000000c0185500 RDI: 0000000000000003
[ 2683.815499] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2683.822781] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04cd2bc6d4
[ 2683.830060] R13: 00000000004c03e8 R14: 00000000004d1ae0 R15: 0000000000000004
19:33:42 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2683.918418] binder_alloc: binder_alloc_mmap_handler: 4085 20ffc000-20ffe000 already mapped failed -16
[ 2683.952652] binder: 4085:4088 ioctl c0306201 200001c0 returned -14
[ 2683.976788] binder_alloc: binder_alloc_mmap_handler: 4085 20001000-20004000 already mapped failed -16
[ 2684.004802] binder: BINDER_SET_CONTEXT_MGR already set
[ 2684.012968] binder: 4085:4091 ioctl 40046207 0 returned -16
[ 2684.057596] binder: undelivered transaction 4323, process died.
19:33:43 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0)

19:33:43 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]})

19:33:43 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:43 executing program 2 (fault-call:2 fault-nth:5):
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:43 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
r3 = socket(0x0, 0x0, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\x01')
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000480)=0xe8)
sendmsg$nl_route_sched(r3, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@deltfilter={0x2c, 0x2d, 0x49c6cec6d0e145a0, 0x70bd25, 0x25dfdbfc, {0x0, r5, {0xffff, 0x3}, {0x2, 0xfff1}, {0xd, 0xd}}, [@TCA_RATE={0x8, 0x5, {0x400, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x840)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x220042, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r6, 0x10, &(0x7f0000000140)={&(0x7f0000000080)=""/174, 0xae}}, 0x10)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:43 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0189436, &(0x7f0000000240)={0x10300})

[ 2684.431976] FAULT_INJECTION: forcing a failure.
[ 2684.431976] name failslab, interval 1, probability 0, space 0, times 0
[ 2684.474104] CPU: 1 PID: 4109 Comm: syz-executor2 Not tainted 4.20.0+ #7
[ 2684.480890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2684.490332] Call Trace:
[ 2684.490359]  dump_stack+0x1db/0x2d0
[ 2684.490383]  ? dump_stack_print_info.cold+0x20/0x20
[ 2684.490406]  ? device_wakeup_enable+0xb8/0x280
[ 2684.490425]  ? device_set_wakeup_enable+0x2b/0x60
[ 2684.490448]  ? usb_hcd_submit_urb+0xfc0/0x20a0
[ 2684.496657]  ? usb_submit_urb+0x6f0/0x1400
[ 2684.496674]  ? usb_control_msg+0x353/0x570
19:33:43 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]})

19:33:43 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x40085511, &(0x7f0000000240)={0x10300})

[ 2684.496697]  should_fail.cold+0xa/0x15
[ 2684.496719]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2684.496744]  ? ___might_sleep+0x1e7/0x310
[ 2684.537286]  ? arch_local_save_flags+0x50/0x50
[ 2684.537310]  ? wakeup_source_create+0x41/0xa0
[ 2684.537338]  __should_failslab+0x121/0x190
[ 2684.537358]  should_failslab+0x9/0x14
[ 2684.546417]  __kmalloc_track_caller+0x2d8/0x740
[ 2684.546440]  ? rcu_read_lock_sched_held+0x110/0x130
[ 2684.546457]  ? kstrdup_const+0x66/0x80
[ 2684.546478]  kstrdup+0x3a/0x70
19:33:43 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]})

[ 2684.546496]  kstrdup_const+0x66/0x80
[ 2684.574960]  wakeup_source_create+0x65/0xa0
[ 2684.579297]  device_wakeup_enable+0xb8/0x280
[ 2684.583727]  device_set_wakeup_enable+0x2b/0x60
[ 2684.588419]  usb_hcd_submit_urb+0xfc0/0x20a0
[ 2684.592853]  ? usbdev_ioctl+0x26/0x30
[ 2684.596676]  ? usb_create_hcd+0x40/0x40
[ 2684.600663]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2684.605600]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2684.610538]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2684.616090]  ? lockdep_init_map+0x10c/0x5b0
[ 2684.620420]  ? lockdep_init_map+0x10c/0x5b0
[ 2684.620450]  usb_submit_urb+0x6f0/0x1400
[ 2684.620478]  usb_start_wait_urb+0x154/0x370
[ 2684.620496]  ? sg_clean+0x240/0x240
[ 2684.620511]  ? usb_init_urb+0x167/0x1e0
[ 2684.620535]  ? kmem_cache_alloc_trace+0x354/0x760
[ 2684.628911]  ? kasan_check_write+0x14/0x20
[ 2684.628929]  ? usb_alloc_urb+0x24/0x50
[ 2684.628954]  usb_control_msg+0x353/0x570
[ 2684.628975]  ? usb_start_wait_urb+0x370/0x370
[ 2684.628991]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2684.629019]  proc_control+0x5ec/0xf50
19:33:43 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]})

[ 2684.671700]  ? proc_bulk+0xa50/0xa50
[ 2684.675433]  ? check_preemption_disabled+0x48/0x290
[ 2684.680472]  usbdev_do_ioctl+0x1f9f/0x38c0
[ 2684.684730]  ? processcompl_compat+0x680/0x680
[ 2684.689331]  ? debug_smp_processor_id+0x1c/0x20
[ 2684.694014]  ? perf_trace_lock_acquire+0x138/0x7d0
[ 2684.698971]  ? get_pid_task+0xd4/0x190
[ 2684.702880]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2684.707827]  ? perf_trace_lock+0x750/0x750
[ 2684.712082]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2684.717637]  ? __fget+0x472/0x710
[ 2684.721099]  ? find_held_lock+0x35/0x120
19:33:43 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]})

[ 2684.723559] libceph: bad option at '
'
[ 2684.725173]  ? __fget+0x472/0x710
[ 2684.732633]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2684.738192]  ? lock_downgrade+0x910/0x910
[ 2684.738886] binder: 4102:4110 ioctl c0306201 200001c0 returned -14
[ 2684.742352]  ? kasan_check_read+0x11/0x20
[ 2684.742372]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2684.742393]  ? rcu_read_unlock_special+0x380/0x380
[ 2684.742421]  ? __fget+0x499/0x710
[ 2684.742454]  usbdev_ioctl+0x26/0x30
[ 2684.742472]  ? usbdev_compat_ioctl+0x30/0x30
[ 2684.774578]  do_vfs_ioctl+0x107b/0x17d0
[ 2684.778585]  ? wait_for_completion+0x810/0x810
[ 2684.783197]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2684.783416] binder: undelivered transaction 4325, process died.
[ 2684.787889]  ? __fget_light+0x2db/0x420
[ 2684.787908]  ? fget_raw+0x20/0x20
[ 2684.787928]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2684.787946]  ? fput+0x128/0x1a0
[ 2684.787964]  ? do_syscall_64+0x8c/0x800
[ 2684.787981]  ? do_syscall_64+0x8c/0x800
[ 2684.787998]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2684.788018]  ? security_file_ioctl+0x93/0xc0
[ 2684.827220]  ksys_ioctl+0xab/0xd0
[ 2684.830685]  __x64_sys_ioctl+0x73/0xb0
[ 2684.834587]  do_syscall_64+0x1a3/0x800
[ 2684.838483]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2684.843421]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2684.848457]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2684.853314]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2684.858508] RIP: 0033:0x457ec9
19:33:43 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

[ 2684.862226] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2684.881127] RSP: 002b:00007f04cd2bbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2684.888838] RAX: ffffffffffffffda RBX: 00007f04cd2bbc90 RCX: 0000000000457ec9
[ 2684.896105] RDX: 0000000020000240 RSI: 00000000c0185500 RDI: 0000000000000003
[ 2684.903380] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2684.910651] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04cd2bc6d4
[ 2684.917918] R13: 00000000004c03e8 R14: 00000000004d1ae0 R15: 0000000000000004
19:33:44 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0, 0x0)

19:33:44 executing program 0:
r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c)
getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040), &(0x7f00000001c0)=0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[@increfs={0x40046304, 0x2}], 0xf1, 0x20000240, &(0x7f0000000080)="d2aa8045fc2d5b575e21cadce1cd8012a03e8801e3f20b13eb9045aed1fb708464a513358358ce68b2c22944d8a512c846c676005e8e757c03437be582c2e901000000000000001520955d5e6df3407c6ad4abe5e6125bec93b0e5ea50575a1e9e41e83a6150a3dab690eb83bdc05b7dd4fcdbd25f989d2de4274a9de0b02b6e099d46c34cffd526879ae4597f8cb07f497eb220f992009aed0e82dc51c1c58d98c0aef3fe9773422b365c5487b129b892d893c2cd8fa0454900356ae3942e7a21d48a4f78de1e7b2c"})

19:33:44 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5451, &(0x7f0000000240)={0x10300})

19:33:44 executing program 2 (fault-call:2 fault-nth:6):
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:44 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]})

19:33:44 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:44 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:44 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]})

[ 2685.476745] binder_alloc: binder_alloc_mmap_handler: 4137 20001000-20004000 already mapped failed -16
[ 2685.511975] binder: BINDER_SET_CONTEXT_MGR already set
19:33:44 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:44 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x550b, &(0x7f0000000240)={0x10300})

[ 2685.536253] binder: 4137:4149 ioctl 40046207 0 returned -16
19:33:44 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:44 executing program 0:
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000003000/0x2000)=nil, 0x2000}, &(0x7f0000000140)=0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000006016f12ed351124249817e48811d1e830000000000000000000000000000000005000400000000000000000000000000000000000000000000000000435be602e9b0058987a9c873bcb29e10700ce35717437fdcdb021f9f6e94", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2685.746592] binder_alloc: 4170: binder_alloc_buf size 1125921381679104 failed, no address space
[ 2685.777003] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 2685.807777] binder: 4170:4171 transaction failed 29201/-28, size 1125921381679104-0 line 3035
[ 2685.821775] binder: 4170:4171 ioctl c0306201 200001c0 returned -14
[ 2685.835461] binder_alloc: binder_alloc_mmap_handler: 4170 20001000-20004000 already mapped failed -16
[ 2685.848894] binder: BINDER_SET_CONTEXT_MGR already set
[ 2685.854572] binder: 4170:4171 ioctl 40046207 0 returned -16
[ 2685.854752] binder_alloc: 4170: binder_alloc_buf, no vma
[ 2685.867125] binder: 4170:4175 transaction failed 29189/-3, size 1125921381679104-0 line 3035
[ 2685.876866] binder: 4170:4175 ioctl c0306201 200001c0 returned -14
[ 2685.919367] net_ratelimit: 11 callbacks suppressed
[ 2685.919376] protocol 88fb is buggy, dev hsr_slave_0
[ 2685.929423] protocol 88fb is buggy, dev hsr_slave_1
19:33:45 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0)

19:33:45 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]})

19:33:45 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc020660b, &(0x7f0000000240)={0x10300})

19:33:45 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80085504, &(0x7f0000000240)={0x10300})

19:33:45 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:45 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x5})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x20000240, &(0x7f00000003c0)})

19:33:45 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000240)={0x10300})

[ 2686.508411] binder_alloc: binder_alloc_mmap_handler: 4186 20001000-20004000 already mapped failed -16
[ 2686.542934] binder: BINDER_SET_CONTEXT_MGR already set
19:33:45 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0)

19:33:45 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]})

19:33:45 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x40049409, &(0x7f0000000240)={0x10300})

[ 2686.566706] binder: 4186:4187 ioctl 40046207 0 returned -16
19:33:45 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550c, &(0x7f0000000240)={0x10300})

19:33:45 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@loopback, @local, <r3=>0x0}, &(0x7f0000000100)=0xc)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00')
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x42000420}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x120, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004001)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})
pipe(&(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$can_bcm(r7, &(0x7f0000000140)={0x1d, r3}, 0x10)
ioctl$KDGKBENT(r6, 0x4b46, &(0x7f0000000080)={0x9a5, 0x1, 0x8})

[ 2686.765979] binder: 4213:4214 ioctl c0306201 200001c0 returned -14
[ 2686.775863] binder_alloc: binder_alloc_mmap_handler: 4213 20001000-20004000 already mapped failed -16
[ 2686.787684] binder: BINDER_SET_CONTEXT_MGR already set
[ 2686.796954] binder: 4213:4214 ioctl 40046207 0 returned -16
[ 2686.819798] binder_alloc: 4213: binder_alloc_buf, no vma
[ 2686.849114] binder: 4213:4216 transaction failed 29189/-3, size 0-0 line 3035
[ 2686.869073] binder: undelivered transaction 4332, process died.
[ 2686.886877] binder: 4213:4216 ioctl c0306201 200001c0 returned -14
[ 2686.959355] protocol 88fb is buggy, dev hsr_slave_0
[ 2686.964507] protocol 88fb is buggy, dev hsr_slave_1
[ 2686.969431] protocol 88fb is buggy, dev hsr_slave_0
[ 2686.974685] protocol 88fb is buggy, dev hsr_slave_1
[ 2686.979804] protocol 88fb is buggy, dev hsr_slave_0
[ 2686.984904] protocol 88fb is buggy, dev hsr_slave_1
[ 2687.359409] protocol 88fb is buggy, dev hsr_slave_0
[ 2687.364550] protocol 88fb is buggy, dev hsr_slave_0
19:33:46 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000240)={0x10300})

19:33:46 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0)

19:33:46 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240))

19:33:46 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000080000000000000000000000000000000005000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x7ff, 0x6, 0x100000001, 0x5, 0xffffffffffffffe0})

19:33:46 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]})

[ 2687.536517] vhci_hcd: default hub control req: 0000 v0000 i0000 l0
[ 2687.541728] binder: 4224:4227 got transaction to invalid handle
[ 2687.560971] binder: 4224:4227 transaction failed 29201/-22, size 0-0 line 2896
[ 2687.578379] binder: 4224:4227 ioctl c0306201 200001c0 returned -14
19:33:46 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]})

19:33:46 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551c, &(0x7f0000000240)={0x10300})

[ 2687.605228] binder_alloc: binder_alloc_mmap_handler: 4224 20001000-20004000 already mapped failed -16
[ 2687.633994] binder: BINDER_SET_CONTEXT_MGR already set
19:33:46 executing program 1 (fault-call:2 fault-nth:0):
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:46 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4004551e, &(0x7f0000000240)={0x10300})

[ 2687.660639] binder: 4224:4227 ioctl 40046207 0 returned -16
[ 2687.678453] binder: 4224:4237 got transaction to invalid handle
19:33:46 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

[ 2687.732435] binder: 4224:4237 transaction failed 29201/-22, size 0-0 line 2896
[ 2687.762134] binder: 4224:4237 ioctl c0306201 200001c0 returned -14
[ 2687.770825] FAULT_INJECTION: forcing a failure.
[ 2687.770825] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2687.814338] CPU: 1 PID: 4249 Comm: syz-executor1 Not tainted 4.20.0+ #7
[ 2687.821140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2687.830533] Call Trace:
[ 2687.833143]  dump_stack+0x1db/0x2d0
[ 2687.836791]  ? dump_stack_print_info.cold+0x20/0x20
[ 2687.841855]  should_fail.cold+0xa/0x15
[ 2687.845762]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2687.850890]  ? arch_local_save_flags+0x50/0x50
[ 2687.855485]  ? lock_release+0xc40/0xc40
[ 2687.859493]  should_fail_alloc_page+0x50/0x60
[ 2687.864489]  __alloc_pages_nodemask+0x323/0xdc0
[ 2687.869180]  ? find_held_lock+0x35/0x120
[ 2687.873261]  ? __alloc_pages_slowpath+0x2cc0/0x2cc0
[ 2687.878311]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 2687.883341]  ? usbfs_increase_memory_usage+0xee/0x1c0
[ 2687.888546]  ? usbfs_decrease_memory_usage+0x30/0x30
[ 2687.893667]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2687.893693]  alloc_pages_current+0x107/0x210
[ 2687.893711]  ? check_ctrlrecip+0xab/0x320
[ 2687.893733]  __get_free_pages+0xc/0x40
19:33:46 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]})

19:33:46 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]})

[ 2687.904116]  proc_control+0x250/0xf50
[ 2687.904137]  ? __lock_acquire+0x572/0x4a30
[ 2687.904159]  ? proc_bulk+0xa50/0xa50
[ 2687.904179]  ? check_preemption_disabled+0x48/0x290
[ 2687.928937]  usbdev_do_ioctl+0x1f9f/0x38c0
[ 2687.933867]  ? processcompl_compat+0x680/0x680
[ 2687.938479]  ? debug_smp_processor_id+0x1c/0x20
[ 2687.943157]  ? perf_trace_lock_acquire+0x138/0x7d0
[ 2687.948104]  ? get_pid_task+0xd4/0x190
[ 2687.952008]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2687.956953]  ? perf_trace_lock+0x750/0x750
19:33:46 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]})

[ 2687.961204]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2687.966762]  ? __fget+0x472/0x710
[ 2687.970230]  ? find_held_lock+0x35/0x120
[ 2687.974305]  ? __fget+0x472/0x710
[ 2687.977775]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2687.983337]  ? lock_downgrade+0x910/0x910
[ 2687.987499]  ? kasan_check_read+0x11/0x20
[ 2687.991665]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2687.996958]  ? rcu_read_unlock_special+0x380/0x380
[ 2688.001913]  ? __fget+0x499/0x710
[ 2688.005392]  usbdev_ioctl+0x26/0x30
[ 2688.009036]  ? usbdev_compat_ioctl+0x30/0x30
[ 2688.013463]  do_vfs_ioctl+0x107b/0x17d0
[ 2688.017455]  ? wait_for_completion+0x810/0x810
[ 2688.022063]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2688.026491]  ? __fget_light+0x2db/0x420
[ 2688.030480]  ? fget_raw+0x20/0x20
[ 2688.033950]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2688.039500]  ? fput+0x128/0x1a0
[ 2688.042797]  ? do_syscall_64+0x8c/0x800
[ 2688.046794]  ? do_syscall_64+0x8c/0x800
[ 2688.050787]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2688.055392]  ? security_file_ioctl+0x93/0xc0
[ 2688.059828]  ksys_ioctl+0xab/0xd0
[ 2688.063298]  __x64_sys_ioctl+0x73/0xb0
[ 2688.067205]  do_syscall_64+0x1a3/0x800
[ 2688.071108]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2688.076059]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2688.081097]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2688.085966]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2688.091170] RIP: 0033:0x457ec9
[ 2688.094373] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2688.113276] RSP: 002b:00007f3311b4bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2688.120989] RAX: ffffffffffffffda RBX: 00007f3311b4bc90 RCX: 0000000000457ec9
[ 2688.128244] RDX: 0000000020000240 RSI: 00000000c0185500 RDI: 0000000000000003
[ 2688.135500] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2688.142753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3311b4c6d4
[ 2688.150010] R13: 00000000004c03e8 R14: 00000000004d1ae0 R15: 0000000000000004
19:33:47 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0)

19:33:47 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]})

19:33:47 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$KDSETLED(r0, 0x4b32, 0x2)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:47 executing program 1 (fault-call:2 fault-nth:1):
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:47 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5450, &(0x7f0000000240)={0x10300})

19:33:47 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0045878, &(0x7f0000000240)={0x10300})

[ 2688.575326] FAULT_INJECTION: forcing a failure.
[ 2688.575326] name failslab, interval 1, probability 0, space 0, times 0
[ 2688.582635] binder: 4272:4274 ioctl c0306201 200001c0 returned -14
[ 2688.606741] binder: BINDER_SET_CONTEXT_MGR already set
19:33:47 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]})

[ 2688.627630] binder: 4272:4283 ioctl 40046207 0 returned -16
[ 2688.633804] CPU: 0 PID: 4270 Comm: syz-executor1 Not tainted 4.20.0+ #7
[ 2688.640580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2688.640589] Call Trace:
[ 2688.640614]  dump_stack+0x1db/0x2d0
[ 2688.640639]  ? dump_stack_print_info.cold+0x20/0x20
[ 2688.657817] binder_alloc: 4272: binder_alloc_buf, no vma
[ 2688.661179]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 2688.661206]  should_fail.cold+0xa/0x15
[ 2688.661229]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2688.661253]  ? ___might_sleep+0x1e7/0x310
[ 2688.661268]  ? arch_local_save_flags+0x50/0x50
[ 2688.661291]  ? kasan_check_read+0x11/0x20
[ 2688.667100] binder: undelivered transaction 4338, process died.
[ 2688.671835]  ? do_raw_spin_unlock+0xa0/0x330
[ 2688.671864]  __should_failslab+0x121/0x190
[ 2688.671885]  should_failslab+0x9/0x14
[ 2688.671901]  kmem_cache_alloc_trace+0x2d1/0x760
[ 2688.671922]  ? __mutex_unlock_slowpath+0x420/0x870
[ 2688.671949]  usb_control_msg+0xce/0x570
[ 2688.671970]  ? usb_start_wait_urb+0x370/0x370
[ 2688.671986]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2688.672016]  proc_control+0x5ec/0xf50
[ 2688.739789]  ? proc_bulk+0xa50/0xa50
[ 2688.743514]  ? check_preemption_disabled+0x48/0x290
[ 2688.748547]  usbdev_do_ioctl+0x1f9f/0x38c0
[ 2688.752799]  ? processcompl_compat+0x680/0x680
[ 2688.757390]  ? debug_smp_processor_id+0x1c/0x20
[ 2688.762067]  ? perf_trace_lock_acquire+0x138/0x7d0
[ 2688.767003]  ? get_pid_task+0xd4/0x190
[ 2688.770894]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2688.775824]  ? perf_trace_lock+0x750/0x750
[ 2688.780077]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2688.785625]  ? __fget+0x472/0x710
[ 2688.789090]  ? find_held_lock+0x35/0x120
[ 2688.793154]  ? __fget+0x472/0x710
[ 2688.796616]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2688.802163]  ? lock_downgrade+0x910/0x910
[ 2688.806344]  ? kasan_check_read+0x11/0x20
[ 2688.810496]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2688.815780]  ? rcu_read_unlock_special+0x380/0x380
[ 2688.820723]  ? __fget+0x499/0x710
[ 2688.824197]  usbdev_ioctl+0x26/0x30
[ 2688.827829]  ? usbdev_compat_ioctl+0x30/0x30
[ 2688.832240]  do_vfs_ioctl+0x107b/0x17d0
[ 2688.836221]  ? wait_for_completion+0x810/0x810
[ 2688.840810]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2688.845228]  ? __fget_light+0x2db/0x420
[ 2688.849205]  ? fget_raw+0x20/0x20
[ 2688.852663]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2688.858204]  ? fput+0x128/0x1a0
[ 2688.861516]  ? do_syscall_64+0x8c/0x800
[ 2688.865488]  ? do_syscall_64+0x8c/0x800
[ 2688.869469]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2688.874066]  ? security_file_ioctl+0x93/0xc0
[ 2688.878480]  ksys_ioctl+0xab/0xd0
[ 2688.881942]  __x64_sys_ioctl+0x73/0xb0
[ 2688.885835]  do_syscall_64+0x1a3/0x800
[ 2688.889732]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2688.894670]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2688.899699]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2688.904554]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2688.909743] RIP: 0033:0x457ec9
19:33:47 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000240)={0x10300})

[ 2688.912939] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2688.931842] RSP: 002b:00007f3311b4bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2688.939555] RAX: ffffffffffffffda RBX: 00007f3311b4bc90 RCX: 0000000000457ec9
[ 2688.946820] RDX: 0000000020000240 RSI: 00000000c0185500 RDI: 0000000000000003
[ 2688.954092] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2688.961362] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3311b4c6d4
[ 2688.968630] R13: 00000000004c03e8 R14: 00000000004d1ae0 R15: 0000000000000004
19:33:47 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8008550e, &(0x7f0000000240)={0x10300})

19:33:47 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]})

19:33:47 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5460, &(0x7f0000000240)={0x10300})

19:33:47 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105502, &(0x7f0000000240)={0x10300})

[ 2689.087619] binder: 4272:4274 transaction failed 29189/-3, size 0-0 line 3035
[ 2689.100867] binder: 4272:4274 ioctl c0306201 200001c0 returned -14
19:33:48 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0)

19:33:48 executing program 1 (fault-call:2 fault-nth:2):
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:48 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040))
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:48 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]})

19:33:48 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550c, &(0x7f0000000240)={0x10300})

19:33:48 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000240)={0x10300})

[ 2689.651454] binder: 4315:4316 ioctl 8905 20000040 returned -22
[ 2689.665695] binder: 4315:4316 ioctl c0306201 200001c0 returned -14
[ 2689.686127] binder_alloc: binder_alloc_mmap_handler: 4315 20001000-20004000 already mapped failed -16
19:33:48 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]})

19:33:48 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0189436, &(0x7f0000000240)={0x10300})

[ 2689.701262] binder: 4315:4316 ioctl 8905 20000040 returned -22
[ 2689.707895] binder: BINDER_SET_CONTEXT_MGR already set
[ 2689.754213] binder: undelivered transaction 4341, process died.
[ 2689.754705] binder: 4315:4337 transaction failed 29189/-22, size 0-0 line 2896
[ 2689.761910] binder: 4315:4327 ioctl 40046207 0 returned -16
19:33:48 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x551f, &(0x7f0000000240)={0x10300})

19:33:48 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]})

[ 2689.807189] binder: 4315:4337 ioctl c0306201 200001c0 returned -14
19:33:48 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300})

19:33:48 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_netdev_private(r0, 0x89fd, &(0x7f0000000080)="1a272165565274bcc4ed05cb1787695e8bbff85e1c2feadf8147ae24276f8c6aa1f52f086c789b71f3d2a02903b4668aac4db2ec0cd7fa9a647caf814d3dbefb8bf67eb55ec575aaaee98f7096d68762fd7532752fd7e3f17983ebe0aa5182dc67b7")
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r6, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x60000000080ffff, [0x2ff], [0xc2]})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300), 0x35e, 0x20000240, &(0x7f00000003c0)})
fremovexattr(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="62747266732e73656c618757a47569b8278f58b19747bb7384ee2ca3932f5ea7906cf5eb641ba6aa9afe54fd318a08819e7edc5676777081cfa1bd061737be022ea67e2c245530c58f7260401ffad7447af6d4b4ed2656067ebc2ea41af4ce8b8eeaea961d2e52af2a6cad99b8087012622f3d544b7b08f15f8bcce1f10f9c46f9517947214f151d2d6da09c62bc6d1e8102d8872af5faa92319a28868fd5b690a65b977cb04c5c584da6f87777d6526e111f3cc0f73e59de2aa7e1407bb79084b1f3f614040fef2e0712ba908442e9f47b9252c"])

[ 2690.048242] binder_alloc: binder_alloc_mmap_handler: 4350 20001000-20004000 already mapped failed -16
[ 2690.055409] binder: BINDER_SET_CONTEXT_MGR already set
[ 2690.063935] binder: 4350:4352 ioctl 40046207 0 returned -16
19:33:49 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)

19:33:49 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]})

19:33:49 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045519, &(0x7f0000000240)={0x10300})

19:33:49 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045510, &(0x7f0000000240)={0x10300})

19:33:49 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x3, 0x2, 0x7, 0x100000000]})
r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:49 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f0000000240)={0x10300})

19:33:49 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})

19:33:49 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0045878, &(0x7f0000000240)={0x10300})

19:33:49 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x40085511, &(0x7f0000000240)={0x10300})

[ 2690.753972] binder: 4362:4366 ioctl c0306201 200001c0 returned -14
[ 2690.793119] binder_alloc: binder_alloc_mmap_handler: 4362 20001000-20004000 already mapped failed -16
19:33:49 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5452, &(0x7f0000000240)={0x10300})

[ 2690.838325] binder: BINDER_SET_CONTEXT_MGR already set
[ 2690.888503] binder: 4362:4366 ioctl 40046207 0 returned -16
19:33:49 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5452, &(0x7f0000000240)={0x10300})

19:33:49 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]})

[ 2690.929702] binder_alloc: 4362: binder_alloc_buf, no vma
[ 2690.971906] binder: 4362:4391 transaction failed 29189/-3, size 0-0 line 3035
[ 2690.977218] binder: undelivered transaction 4345, process died.
[ 2690.993877] binder: 4362:4391 ioctl c0306201 200001c0 returned -14
[ 2691.119381] net_ratelimit: 14 callbacks suppressed
[ 2691.119389] protocol 88fb is buggy, dev hsr_slave_0
[ 2691.119411] protocol 88fb is buggy, dev hsr_slave_0
[ 2691.124411] protocol 88fb is buggy, dev hsr_slave_1
[ 2691.129472] protocol 88fb is buggy, dev hsr_slave_1
[ 2691.144660] protocol 88fb is buggy, dev hsr_slave_0
[ 2691.149835] protocol 88fb is buggy, dev hsr_slave_1
[ 2691.519420] protocol 88fb is buggy, dev hsr_slave_0
[ 2691.524614] protocol 88fb is buggy, dev hsr_slave_0
[ 2691.529730] protocol 88fb is buggy, dev hsr_slave_1
19:33:50 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, 0x0)

19:33:50 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000240)={0x10300})

19:33:50 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8004550f, &(0x7f0000000240)={0x10300})

19:33:50 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5451, &(0x7f0000000240)={0x10300})

19:33:50 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = mq_open(&(0x7f0000000180)='vboxnet1posix_acl_accesseth1\x00', 0x0, 0x82, &(0x7f0000000200)={0x5, 0x8, 0x8, 0x1f3, 0x3, 0xffffffff, 0x2, 0x4})
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x10000000000800)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, <r4=>0x0})
ioctl$VIDIOC_QUERYSTD(0xffffffffffffff9c, 0x8008563f, &(0x7f00000002c0)=<r5=>0x0)
ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000300)=r5)
fcntl$lock(r3, 0x25, &(0x7f0000000280)={0x1, 0x0, 0x7, 0x6, r4})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000160000ac9a1b27d4d9d5faa501ef00000531ac2571d1ca0000000000000c00000040000000000000000000004f59b8561d17f0e3a2f44652f7e9650ffbec5110990b9ef5962048ddfa77e84973afd8784a622ea503ded82b569a921effd00adf61748d46b54ed5d76dc2b2005c9843c177e01e7c0b740e7de099b1a91cb5776671e96e2a185598f13c4f5fca3059a14d5463cbbe0e906598aaf66bd8140c156fe1a00d9cf8839814a0baf2808cd859a4ebb656bdb4ab2a8f50039c458e2d16d09bfadbdbda5ea6949c2a0cbc12bffe1a9f81083a7f1c8e35", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:50 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]})

19:33:50 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x10300})

[ 2691.716761] binder: 4412:4413 transaction failed 29201/-28, size 223000895269937-51539607552 line 3035
19:33:50 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})

19:33:50 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f0000000240)={0x10300})

[ 2691.769563] binder: 4412:4413 ioctl c0306201 200001c0 returned -14
19:33:50 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5460, &(0x7f0000000240)={0x10300})

[ 2691.852903] binder_alloc: binder_alloc_mmap_handler: 4412 20001000-20004000 already mapped failed -16
19:33:50 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f0000000240)={0x10300})

[ 2691.898333] binder: BINDER_SET_CONTEXT_MGR already set
19:33:50 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]})

[ 2691.935876] binder: 4412:4430 ioctl 40046207 0 returned -16
[ 2692.018424] binder_alloc: 4412: binder_alloc_buf, no vma
[ 2692.050662] binder: 4412:4413 transaction failed 29189/-3, size 223000895269937-51539607552 line 3035
[ 2692.091989] binder: 4412:4413 ioctl c0306201 200001c0 returned -14
[ 2692.239348] protocol 88fb is buggy, dev hsr_slave_0
19:33:51 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0)

19:33:51 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5460, &(0x7f0000000240)={0x10300})

19:33:51 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x551f, &(0x7f0000000240)={0x10300})

19:33:51 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]})

19:33:51 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550d, &(0x7f0000000240)={0x10300})

19:33:51 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x82081, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=<r4=>0x0, &(0x7f00000000c0)=0x4)
getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r4, 0x1, 0xd31, 0x1}, &(0x7f0000000140)=0x10)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x1})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:51 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551d, &(0x7f0000000240)={0x10300})

[ 2692.822748] Unknown ioctl -1071601152
[ 2692.838558] binder: 4453:4462 ioctl c0306201 200001c0 returned -14
[ 2692.856874] binder_alloc: binder_alloc_mmap_handler: 4453 20001000-20004000 already mapped failed -16
19:33:51 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]})

19:33:51 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045510, &(0x7f0000000240)={0x10300})

19:33:51 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105500, &(0x7f0000000240)={0x10300})

[ 2692.884090] binder: BINDER_SET_CONTEXT_MGR already set
[ 2692.900068] binder: 4453:4468 ioctl 40046207 0 returned -16
[ 2692.906025] Unknown ioctl -1071601152
[ 2692.952437] binder: undelivered transaction 4351, process died.
[ 2692.952948] binder: 4453:4468 transaction failed 29189/-22, size 0-0 line 2896
19:33:51 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8004550f, &(0x7f0000000240)={0x10300})

19:33:51 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})

[ 2693.045235] binder: 4453:4468 ioctl c0306201 200001c0 returned -14
19:33:52 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0)

19:33:52 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x40085511, &(0x7f0000000240)={0x10300})

19:33:52 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000240)={0x10300})

19:33:52 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x800, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x10000)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20002, 0x0)
ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000080))
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:52 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0045878, &(0x7f0000000240)={0x10300})

19:33:52 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]})

19:33:52 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f0000000240)={0x10300})

[ 2693.923968] binder: 4505:4506 ioctl c0306201 200001c0 returned -14
[ 2693.947365] binder: BINDER_SET_CONTEXT_MGR already set
[ 2693.961484] binder_alloc: 4505: binder_alloc_buf, no vma
19:33:52 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x550b, &(0x7f0000000240)={0x10300})

19:33:52 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]})

[ 2693.975662] binder: 4505:4506 ioctl 40046207 0 returned -16
[ 2693.988800] binder: 4505:4513 transaction failed 29189/-3, size 0-0 line 3035
19:33:52 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5450, &(0x7f0000000240)={0x10300})

19:33:52 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185503, &(0x7f0000000240)={0x10300})

[ 2694.055500] binder: undelivered transaction 4354, process died.
[ 2694.075490] binder: 4505:4513 ioctl c0306201 200001c0 returned -14
19:33:52 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8)
getresgid(&(0x7f0000000240), &(0x7f0000000280)=<r4=>0x0, &(0x7f00000002c0))
fchown(r2, r3, r4)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0)
ioctl$VIDIOC_DBG_S_REGISTER(r5, 0x4038564f, &(0x7f0000000080)={{0x3, @addr=0x401}, 0x8, 0x5, 0x3})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2694.246767] binder: 4535:4536 ioctl c0306201 200001c0 returned -14
[ 2694.257527] binder: BINDER_SET_CONTEXT_MGR already set
[ 2694.263463] binder: 4535:4538 ioctl 40046207 0 returned -16
[ 2694.270114] binder_alloc: 4535: binder_alloc_buf, no vma
[ 2694.276102] binder: undelivered transaction 4357, process died.
[ 2694.282838] binder: 4535:4536 transaction failed 29189/-3, size 0-0 line 3035
[ 2694.300874] binder: 4535:4536 ioctl c0306201 200001c0 returned -14
19:33:53 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0)

19:33:53 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc00c5512, &(0x7f0000000240)={0x10300})

19:33:53 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]})

19:33:53 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x2, &(0x7f0000000240)={0x10300})

19:33:53 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045519, &(0x7f0000000240)={0x10300})

19:33:53 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
open(&(0x7f0000000240)='./file0\x00', 0x101000, 0xf)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x40000, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1})
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000080)={0x2, 0x4, 0x4, 0x20400, {}, {0x2, 0x1, 0x5, 0x83f, 0x25, 0x895a, "6484a64b"}, 0x5da, 0x1, @offset=0x1, 0x4})
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0x20015, r4, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x1c600, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="006300000000000005000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x20000240, &(0x7f00000003c0)})

[ 2694.984266] binder: 4549:4555 ioctl c0585611 20000080 returned -22
19:33:53 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x10300})

19:33:53 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]})

19:33:53 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8008550e, &(0x7f0000000240)={0x10300})

[ 2695.025198] binder: 4549:4555 unknown command 25344
19:33:53 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f0000000240)={0x10300})

[ 2695.090535] binder: 4549:4555 ioctl c0306201 200001c0 returned -22
19:33:53 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550c, &(0x7f0000000240)={0x10300})

[ 2695.136826] binder: 4549:4567 ioctl c0585611 20000080 returned -22
[ 2695.155675] binder: BINDER_SET_CONTEXT_MGR already set
19:33:53 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]})

[ 2695.188284] binder: 4549:4567 ioctl 40046207 0 returned -16
[ 2695.201975] binder: 4549:4575 unknown command 25344
[ 2695.208665] binder: 4549:4575 ioctl c0306201 200001c0 returned -22
19:33:54 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0)

19:33:54 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185502, &(0x7f0000000240)={0x10300})

19:33:54 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x2, &(0x7f0000000240)={0x10300})

19:33:54 executing program 0:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa0102, 0x4)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
rt_sigprocmask(0x1, &(0x7f0000000100)={0x1000}, &(0x7f0000000140), 0x8)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="b1f589680628c31eb7d0f0b483f63200634040000000000000000000000000000000000000000005000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:54 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]})

19:33:54 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045505, &(0x7f0000000240)={0x10300})

19:33:54 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4020940d, &(0x7f0000000240)={0x10300})

[ 2696.011743] binder: 4587:4593 unknown command 1753871793
[ 2696.029228] binder: 4587:4593 ioctl c0306201 200001c0 returned -22
19:33:54 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})

19:33:54 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105500, &(0x7f0000000240)={0x10300})

[ 2696.102147] binder_alloc: binder_alloc_mmap_handler: 4587 20001000-20004000 already mapped failed -16
[ 2696.116470] usb usb8: usbfs: interface 0 claimed by hub while 'syz-executor1' sets config #66304
[ 2696.153263] binder: BINDER_SET_CONTEXT_MGR already set
19:33:54 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045510, &(0x7f0000000240)={0x10300})

[ 2696.174562] usb usb8: usbfs: interface 0 claimed by hub while 'syz-executor1' sets config #66304
[ 2696.197009] binder: 4587:4593 ioctl 40046207 0 returned -16
19:33:54 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc020660b, &(0x7f0000000240)={0x10300})

19:33:54 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc00c5512, &(0x7f0000000240)={0x10300})

[ 2696.224956] binder: 4587:4593 unknown command 1753871793
[ 2696.253948] binder: 4587:4593 ioctl c0306201 200001c0 returned -22
[ 2696.399367] net_ratelimit: 21 callbacks suppressed
[ 2696.399376] protocol 88fb is buggy, dev hsr_slave_0
[ 2696.409538] protocol 88fb is buggy, dev hsr_slave_1
19:33:55 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0, 0x0)

19:33:55 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]})

19:33:55 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185502, &(0x7f0000000240)={0x10300})

19:33:55 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x72, 0x200002)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x5c, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000240), &(0x7f0000000280)=[0x0, 0x0, 0x38, 0x0, 0x40]}}, @enter_looper, @release={0x40046306, 0x2}, @register_looper, @decrefs={0x40046307, 0x1}], 0x80, 0x0, &(0x7f0000000400)="b23a99659013288bef0c802ac3cc2aa07cf0924267868f7ee11130f410c9df1cb3d1f3d7dbfe6faf529342810904a5fe7f7bdde9e9fec7bbaed0986239ba3d99e11891e12c3a0204f1c4d9f4301ebe026a297239888001d48828e5ab6999bd8909bd566cde53e3dbdbc6e045b6034b297ffff237c9034416b60a1ae883fcc920"})
r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})
signalfd4(r3, &(0x7f0000000180)={0x7fffffff}, 0x8, 0x80800)
r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x800, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20882000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r5, 0x300, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x100, 0x6, 0x37, 0x80000000}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, &(0x7f0000000140)={0x7fffffff, 0x2, 0x20, 0x7})
ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @multicast1}, 0x40, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000040)='veth1\x00', 0x9, 0x200, 0x2})

19:33:55 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5514, &(0x7f0000000240)={0x10300})

19:33:55 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550d, &(0x7f0000000240)={0x10300})

[ 2697.081016] binder: 4644:4646 ioctl c0306201 200001c0 returned -14
[ 2697.100334] binder: 4644:4646 ioctl 890c 20000080 returned -22
19:33:55 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000240)={0x10300})

19:33:55 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5451, &(0x7f0000000240)={0x10300})

19:33:55 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185502, &(0x7f0000000240)={0x10300})

[ 2697.128600] binder_alloc: binder_alloc_mmap_handler: 4644 20001000-20004000 already mapped failed -16
19:33:55 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})

[ 2697.172300] binder: BINDER_SET_CONTEXT_MGR already set
[ 2697.218664] binder: 4644:4646 ioctl 40046207 0 returned -16
[ 2697.218760] binder_alloc: 4644: binder_alloc_buf, no vma
[ 2697.256294] binder: 4644:4662 transaction failed 29189/-3, size 0-0 line 3035
19:33:55 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]})

19:33:55 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045519, &(0x7f0000000240)={0x10300})

[ 2697.303077] binder: 4644:4662 ioctl c0306201 200001c0 returned -14
[ 2697.321880] binder: 4644:4670 ioctl 890c 20000080 returned -22
[ 2697.359379] protocol 88fb is buggy, dev hsr_slave_0
[ 2697.359531] protocol 88fb is buggy, dev hsr_slave_0
[ 2697.364485] protocol 88fb is buggy, dev hsr_slave_1
[ 2697.369564] protocol 88fb is buggy, dev hsr_slave_1
[ 2697.379661] protocol 88fb is buggy, dev hsr_slave_0
[ 2697.384737] protocol 88fb is buggy, dev hsr_slave_1
[ 2697.395885] binder: undelivered transaction 4362, process died.
[ 2697.759350] protocol 88fb is buggy, dev hsr_slave_0
[ 2697.764461] protocol 88fb is buggy, dev hsr_slave_1
19:33:56 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0)

19:33:56 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f0000000240)={0x10300})

19:33:56 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550d, &(0x7f0000000240)={0x10300})

19:33:56 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]})

19:33:56 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550c, &(0x7f0000000240)={0x10300})

19:33:56 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x81, 0x9, &(0x7f0000000080)=0x2})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:56 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]})

19:33:56 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x2, &(0x7f0000000240)={0x10300})

19:33:56 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550c, &(0x7f0000000240)={0x10300})

[ 2698.190724] binder: 4684:4685 ioctl c0306201 200001c0 returned -14
[ 2698.212825] binder_alloc: binder_alloc_mmap_handler: 4684 20001000-20004000 already mapped failed -16
[ 2698.283543] binder: BINDER_SET_CONTEXT_MGR already set
19:33:56 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]})

[ 2698.313466] binder: 4684:4685 ioctl 40046207 0 returned -16
[ 2698.342321] binder_alloc: 4684: binder_alloc_buf, no vma
19:33:57 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]})

[ 2698.379580] binder: 4684:4711 transaction failed 29189/-3, size 0-0 line 3035
[ 2698.403462] binder: undelivered transaction 4365, process died.
[ 2698.415130] binder: 4684:4711 ioctl c0306201 200001c0 returned -14
19:33:57 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000050000000000001e1c8dcd125f768d00000000000000000000000000000000000000000000e900000000ca47113707fb812a4de646019c2f96b61f64e95430e330fb9a311799470f43fb28f0c506033440e48511c67aef2fca2c44d2d66063f2e73d8342357f182d7d345e8f528c64b35d6ef6eec4c57c3f3ce276e8dd91532c1b8f47f10fe5198b9523d4905ebc12e86f04b5", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2698.545092] binder: 4717:4718 transaction failed 29201/-28, size 0-3909091328 line 3035
[ 2698.564315] binder: 4717:4718 ioctl c0306201 200001c0 returned -14
[ 2698.600103] binder: BINDER_SET_CONTEXT_MGR already set
[ 2698.604934] binder_alloc: binder_alloc_mmap_handler: 4717 20001000-20004000 already mapped failed -16
[ 2698.628627] binder: 4717:4722 ioctl 40046207 0 returned -16
[ 2698.635591] binder_alloc: 4717: binder_alloc_buf, no vma
[ 2698.644281] binder: 4717:4718 transaction failed 29189/-3, size 0-3909091328 line 3035
[ 2698.654346] binder: 4717:4718 ioctl c0306201 200001c0 returned -14
19:33:57 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)

19:33:57 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]})

19:33:57 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4004551e, &(0x7f0000000240)={0x10300})

19:33:57 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x9)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1f, 0x802)
write$P9_RSTAT(r3, &(0x7f0000000080)={0x6b, 0x7d, 0x2, {0x0, 0x64, 0x0, 0x0, {0x1, 0x2}, 0x80800000, 0x7f, 0x3f, 0x2, 0x22, 'eth0md5sumem1\'posix_acl_access&lo%', 0x1, '^', 0x1, ']', 0xd, '/dev/binder#\x00'}}, 0x6b)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})
fcntl$getown(r0, 0x9)

19:33:57 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5452, &(0x7f0000000240)={0x10300})

19:33:57 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0045878, &(0x7f0000000240)={0x10300})

19:33:57 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000240)={0x10300})

[ 2699.286685] binder: 4736:4742 ioctl c0306201 200001c0 returned -14
[ 2699.314353] binder: BINDER_SET_CONTEXT_MGR already set
19:33:58 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]})

19:33:58 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045515, &(0x7f0000000240)={0x10300})

19:33:58 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0045878, &(0x7f0000000240)={0x10300})

[ 2699.334437] binder: 4736:4746 ioctl 40046207 0 returned -16
[ 2699.354849] binder_alloc: 4736: binder_alloc_buf, no vma
[ 2699.367579] binder: 4736:4742 transaction failed 29189/-3, size 0-0 line 3035
[ 2699.419905] binder: undelivered transaction 4371, process died.
[ 2699.427189] binder: 4736:4742 ioctl c0306201 200001c0 returned -14
19:33:58 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc020660b, &(0x7f0000000240)={0x10300})

19:33:58 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]})

19:33:58 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0)

19:33:58 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x10300})

19:33:58 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200404000000000000000000000000000000000000000000500000000000000000000000000000000b3865fc000fefd40f199de000000000000000000bc6b29efb39f51320c99771da7cf9340b86d41deba16588f53d95e89302b4c0bbe1ef4a6d2a21c0c3742fc3ae40b18fb45753fd2dfc6168e6e84318e3cc97664ce4acaa9dc22759d2bee440000000089f6eb4b028c2a90142e14d9db4bb5c29b63cab9c6aabda21fc01324ae5b528c0050a96e4d64de67c425b4b2f50bb4a8e422e438afe648ec99297bca3c0942a4586537314db8fe54fbfb58e3c139013caaf8453fa4a1ca8b8c9fee4cbddf367da2d8619aaa01611ec0f5f7644d0ac2bce6c86f119214f998bb00459b47da39f004b34d114c53677800c750d7e70ed197f4c71870f6f349d02c983d2edd7fffd8685df8254cf85679421774af0f9986fa4d020270664067e91547aa4709fe80231783b45215c212dabaa1bfa58acc5be2c2dd82ddfb03854d07d2000000000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:33:58 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551c, &(0x7f0000000240)={0x10300})

19:33:58 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]})

19:33:58 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550d, &(0x7f0000000240)={0x10300})

19:33:59 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045515, &(0x7f0000000240)={0x10300})

[ 2700.358620] binder: 4781:4782 unknown command 1077936130
[ 2700.387928] binder: 4781:4782 ioctl c0306201 200001c0 returned -22
19:33:59 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]})

19:33:59 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550d, &(0x7f0000000240)={0x10300})

19:33:59 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x40049409, &(0x7f0000000240)={0x10300})

[ 2700.429726] binder_alloc: binder_alloc_mmap_handler: 4781 20001000-20004000 already mapped failed -16
19:33:59 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5450, &(0x7f0000000240)={0x10300})

19:33:59 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5421, &(0x7f0000000240)={0x10300})

[ 2700.512592] binder: BINDER_SET_CONTEXT_MGR already set
[ 2700.542314] binder: 4781:4782 ioctl 40046207 0 returned -16
[ 2700.571283] binder: 4781:4808 unknown command 1077936130
[ 2700.590938] binder: 4781:4808 ioctl c0306201 200001c0 returned -22
19:34:00 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0)

19:34:00 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]})

19:34:00 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5514, &(0x7f0000000240)={0x10300})

19:34:00 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4020940d, &(0x7f0000000240)={0x10300})

19:34:00 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5514, &(0x7f0000000240)={0x10300})

19:34:00 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x400)
sendmsg$rds(r3, &(0x7f0000001380)={&(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/201, 0xc9}, {&(0x7f0000000200)=""/159, 0x9f}], 0x3, 0x0, 0x0, 0x40004}, 0x40)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000005000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:00 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000240)={0x10300})

19:34:00 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})

[ 2701.417629] binder_alloc: 4828: binder_alloc_buf size 4611686018429485064 failed, no address space
19:34:00 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4004551e, &(0x7f0000000240)={0x10300})

19:34:00 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045505, &(0x7f0000000240)={0x10300})

[ 2701.469604] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 2701.519404] net_ratelimit: 14 callbacks suppressed
[ 2701.519412] protocol 88fb is buggy, dev hsr_slave_0
[ 2701.519489] protocol 88fb is buggy, dev hsr_slave_0
[ 2701.524429] protocol 88fb is buggy, dev hsr_slave_1
[ 2701.529517] protocol 88fb is buggy, dev hsr_slave_1
[ 2701.544634] protocol 88fb is buggy, dev hsr_slave_0
[ 2701.549785] protocol 88fb is buggy, dev hsr_slave_1
19:34:00 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0045878, &(0x7f0000000240)={0x10300})

[ 2701.571020] binder: 4828:4830 transaction failed 29201/-28, size 0-4611686018429485058 line 3035
[ 2701.601813] binder: 4828:4830 ioctl c0306201 200001c0 returned -14
19:34:00 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000240)={0x10300})

[ 2701.626866] usb usb8: usbfs: interface 0 claimed by hub while 'syz-executor2' sets config #66304
[ 2701.653789] binder_alloc: binder_alloc_mmap_handler: 4828 20001000-20004000 already mapped failed -16
[ 2701.694083] usb usb8: usbfs: interface 0 claimed by hub while 'syz-executor2' sets config #66304
[ 2701.708500] binder: BINDER_SET_CONTEXT_MGR already set
[ 2701.725932] binder: 4828:4830 ioctl 40046207 0 returned -16
[ 2701.758668] binder_alloc: 4828: binder_alloc_buf, no vma
[ 2701.794833] binder: 4828:4864 transaction failed 29189/-3, size 0-4611686018429485058 line 3035
[ 2701.828749] binder: 4828:4864 ioctl c0306201 200001c0 returned -14
[ 2701.919380] protocol 88fb is buggy, dev hsr_slave_0
[ 2701.924528] protocol 88fb is buggy, dev hsr_slave_1
[ 2701.929679] protocol 88fb is buggy, dev hsr_slave_0
19:34:01 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0)

19:34:01 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]})

19:34:01 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045515, &(0x7f0000000240)={0x10300})

19:34:01 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f0000000240)={0x10300})

19:34:01 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105500, &(0x7f0000000240)={0x10300})

19:34:01 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
sendmsg$alg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="1d9dff3e8e73d9f29ffd7eeaaad4154dc629ebf25e829a9f9453885126017fa9d8a4edd1239137dd96603a8b5263822a9b2a1aa6c3df507a940f63692abb46d05772c262c8fee69d5925d2a933f845fc4738a5d737227b609977569a66e871db92d7cd4940c8f4ccb4b5e4f5e2ba7df9bad95aa0f639b13e6840f7e2917f83be0f5886313c3e228bcb660517629755e179352d64fe050f37315d878b6d893ec0355f87", 0xa3}], 0x1, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0xe9}, @iv={0xf8, 0x117, 0x2, 0xe1, "ae32c9ecd3b31d72807aed37e310737e960acae0e22c263cb3e7f076dbbcf0ab63455be30c968faae18be053e0f4ab57882c5d038bb322dd6dc87c68a28b0a4242b1dd008cd5ce84aae5c255a65970087eb626b14608af17637b4c0be1c2b4f0837e8e9a8425b3c0cdb84efdad72d78b88fd65dc9e952da98c39b1f690a241cd1ee91b9fd062763bfd89e37c18a18606ae0992b295b95caf6960e89ae2ff625015fdd29d78c8ab0acda2465e66f99bce9b708623565d1f09777a86d52a92cd8edc0fcf05a4ba9843f306d16034da22f0cd21bf0f0035bffb02767608e0841e6f6a"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xed}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x88, 0x117, 0x2, 0x71, "24cc5618e9b4aa48fb55292a69033ab79c9e58f3b520124c0eec5ff99934e6ab12dbb93b481fec7cc31f07ef5a975a987ab5dab112a94a80b56ea423ece210284197b78d0721eb771c018dde944c267b3071808c5272b3a6a60b8b694923bbc80a6b71f16c4ba32a1fd6d6bdbf082714df"}], 0x1210, 0x4800}, 0x20000000)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:01 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551d, &(0x7f0000000240)={0x10300})

19:34:01 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]})

19:34:01 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105502, &(0x7f0000000240)={0x10300})

19:34:01 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551c, &(0x7f0000000240)={0x10300})

[ 2702.532756] binder: 4879:4880 ioctl c0306201 200001c0 returned -14
[ 2702.556120] binder_alloc: binder_alloc_mmap_handler: 4879 20001000-20004000 already mapped failed -16
[ 2702.639392] protocol 88fb is buggy, dev hsr_slave_0
19:34:01 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]})

[ 2702.666648] binder_alloc: 4879: binder_alloc_buf, no vma
[ 2702.695257] binder: BINDER_SET_CONTEXT_MGR already set
19:34:01 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8008550e, &(0x7f0000000240)={0x10300})

[ 2702.734649] binder: 4879:4886 transaction failed 29189/-3, size 0-0 line 3035
[ 2702.782898] binder: 4879:4897 ioctl 40046207 0 returned -16
[ 2702.807322] binder: undelivered transaction 4378, process died.
[ 2702.814553] binder: 4879:4886 ioctl c0306201 200001c0 returned -14
19:34:02 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0)

19:34:02 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550c, &(0x7f0000000240)={0x10300})

19:34:02 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]})

19:34:02 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000040)=0x100)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:02 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550d, &(0x7f0000000240)={0x10300})

19:34:02 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045505, &(0x7f0000000240)={0x10300})

[ 2703.558456] usb usb8: usbfs: interface 0 claimed by hub while 'syz-executor4' sets config #66304
[ 2703.591162] binder: 4919:4920 ioctl 40047459 20000040 returned -22
19:34:02 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]})

19:34:02 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000240)={0x10300})

[ 2703.621579] binder: 4919:4920 ioctl c0306201 200001c0 returned -14
[ 2703.622229] usb usb8: usbfs: interface 0 claimed by hub while 'syz-executor4' sets config #66304
[ 2703.645082] binder: 4919:4931 ioctl 40047459 20000040 returned -22
[ 2703.677687] binder: BINDER_SET_CONTEXT_MGR already set
19:34:02 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]})

[ 2703.700489] binder: 4919:4930 ioctl 40046207 0 returned -16
[ 2703.720034] binder: undelivered transaction 4381, process died.
19:34:02 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000240)={0x10300})

19:34:02 executing program 0:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x141000, 0x0)
setsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000080)="4665e87237a78fa35e96925f1ba777cf93cee155329bab0ccaf8a8636ccf083bbb1866473a70321088a4d48d03541683bab7e39e3fe99e4e2d9655872fe4aff2a41568b4cee0efa3944717734385df7d6623b0963cac72afbb70f359e6106599418c8a14317816e6fd2186b59ba8491d136624a5cdcf54c31206f318", 0x7c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000c36c3e8d0dc8eb5385e000000000005000000000000000000000029c3ccf1d94b", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:02 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})

[ 2703.875917] binder: 4943:4945 unknown command 0
[ 2703.899174] binder: 4943:4945 ioctl c0306201 200001c0 returned -22
[ 2703.913367] binder_alloc: binder_alloc_mmap_handler: 4943 20001000-20004000 already mapped failed -16
[ 2703.923792] binder: BINDER_SET_CONTEXT_MGR already set
[ 2703.940070] binder: 4943:4945 ioctl 40046207 0 returned -16
[ 2703.946041] binder: 4943:4951 unknown command 0
[ 2703.957516] binder: 4943:4951 ioctl c0306201 200001c0 returned -22
19:34:03 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0)

19:34:03 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80085504, &(0x7f0000000240)={0x10300})

19:34:03 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]})

19:34:03 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5421, &(0x7f0000000240)={0x10300})

19:34:03 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x6, {0x7, 0x1c, 0x8, 0x200, 0x5, 0x101, 0xfff, 0x736}}, 0x50)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="40e856e901a4b9a00100ae1e05016301400000000000000000000000000000000000bed944137000000000000000000000002350fe25fe8944fd6238353a4ae67ce954d23c3e26a08ba3532d15ed2fad9da82a6077241dde8b9db50200520b9df054a70eecb14b88f7481b0e48e8f8af0b6a15413f002653bc2dd4ab4be385af77b869b3bab39e8288ae5a4d", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})
setxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x1)

19:34:03 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x550b, &(0x7f0000000240)={0x10300})

19:34:03 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]})

[ 2704.629909] binder: 4963:4964 unknown command -380180416
[ 2704.653842] binder: 4963:4964 ioctl c0306201 200001c0 returned -22
[ 2704.693654] binder_alloc: binder_alloc_mmap_handler: 4963 20001000-20004000 already mapped failed -16
[ 2704.723795] binder: BINDER_SET_CONTEXT_MGR already set
19:34:03 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc01855a1, &(0x7f0000000240)={0x10300})

19:34:03 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000240)={0x10300})

[ 2704.744266] binder: 4963:4964 ioctl 40046207 0 returned -16
[ 2704.760217] binder: 4963:4977 unknown command -380180416
[ 2704.819773] binder: 4963:4977 ioctl c0306201 200001c0 returned -22
19:34:03 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]})

19:34:03 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc01855a1, &(0x7f0000000240)={0x10300})

19:34:03 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185503, &(0x7f0000000240)={0x10300})

19:34:04 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0)

19:34:04 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x202001, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000080)={0x3, 0x1, 'client1\x00', 0x4, "81df944e1eddeab5", "c5ebbaf470dc90b2d6851266a6c6f5d757f1a3608adbcb847a6f98582d2f3d47", 0x7, 0xd14})

19:34:04 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105502, &(0x7f0000000240)={0x10300})

19:34:04 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]})

19:34:04 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10500})

19:34:04 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10500})

19:34:04 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc00c5512, &(0x7f0000000240)={0x10300})

19:34:04 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10900})

19:34:04 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]})

[ 2705.704612] binder: 5009:5022 ioctl c0306201 200001c0 returned -14
[ 2705.735549] binder_alloc: binder_alloc_mmap_handler: 5009 20001000-20004000 already mapped failed -16
19:34:04 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10b00})

[ 2705.811783] binder: BINDER_SET_CONTEXT_MGR already set
[ 2705.829780] binder: 5009:5022 ioctl 40046207 0 returned -16
19:34:04 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10302})

[ 2705.852762] binder_alloc: 5009: binder_alloc_buf, no vma
[ 2705.874044] binder: 5009:5041 transaction failed 29189/-3, size 0-0 line 3035
19:34:04 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10102})

[ 2705.912801] binder: undelivered transaction 4385, process died.
[ 2705.922831] binder: 5009:5041 ioctl c0306201 200001c0 returned -14
19:34:05 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0)

19:34:05 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]})

19:34:05 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x40049409, &(0x7f0000000240)={0x10300})

19:34:05 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
fcntl$dupfd(r2, 0x0, r0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000080)={0x1, 0x10000})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10630840418e000000000000da19c701010000a56c2df963066d5cbe14ec99"], 0x28b, 0x20000240, &(0x7f00000003c0)})

19:34:05 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10b00})

19:34:05 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10302})

19:34:05 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f0000000240)={0x10300})

19:34:05 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10900})

19:34:05 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]})

19:34:05 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10102})

[ 2706.803757] binder: 5061:5070 ioctl 4010aeab 20000080 returned -22
[ 2706.839698] binder: 5061:5070 BC_DEAD_BINDER_DONE 0000000000008e41 not found
[ 2706.925787] binder: BINDER_SET_CONTEXT_MGR already set
19:34:05 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551d, &(0x7f0000000240)={0x10300})

[ 2706.974827] binder: 5061:5087 ioctl 40046207 0 returned -16
[ 2706.978613] binder: 5061:5070 ioctl 4010aeab 20000080 returned -22
[ 2706.984174] binder: 5061:5092 BC_DEAD_BINDER_DONE 0000000000008e41 not found
19:34:05 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]})

19:34:06 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0)

19:34:06 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x103a1})

19:34:06 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x103a1})

19:34:06 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000080000000000000000000000007005e90a05000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:06 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0189436, &(0x7f0000000240)={0x10300})

19:34:06 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]})

[ 2707.820120] usb usb8: usbfs: process 5107 (syz-executor4) did not claim interface 0 before use
[ 2707.853096] usb usb8: usbfs: process 5118 (syz-executor4) did not claim interface 0 before use
19:34:06 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10303})

[ 2707.870677] binder: 5112:5114 got transaction to invalid handle
[ 2707.877733] binder: 5112:5114 transaction failed 29201/-22, size 0-0 line 2896
[ 2707.885524] usb usb8: usbfs: process 5117 (syz-executor2) did not claim interface 0 before use
19:34:06 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]})

[ 2707.918104] binder: 5112:5114 ioctl c0306201 200001c0 returned -14
[ 2707.934153] usb usb8: usbfs: process 5121 (syz-executor2) did not claim interface 0 before use
19:34:06 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5421, &(0x7f0000000240)={0x10300})

[ 2707.960396] binder_alloc: binder_alloc_mmap_handler: 5112 20001000-20004000 already mapped failed -16
19:34:06 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10303})

[ 2708.012198] vhci_hcd: default hub control req: 0303 v0001 i0000 l0
[ 2708.021675] binder: 5112:5123 got transaction to invalid handle
[ 2708.037745] binder: BINDER_SET_CONTEXT_MGR already set
[ 2708.052750] binder: 5112:5123 transaction failed 29201/-22, size 0-0 line 2896
19:34:06 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})

[ 2708.062852] vhci_hcd: default hub control req: 0303 v0001 i0000 l0
[ 2708.088041] vhci_hcd: default hub control req: 0303 v0001 i0000 l0
[ 2708.107106] vhci_hcd: default hub control req: 0303 v0001 i0000 l0
[ 2708.113735] binder: 5112:5129 ioctl 40046207 0 returned -16
[ 2708.136216] binder: 5112:5123 ioctl c0306201 200001c0 returned -14
19:34:06 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xffffffff00000000})

[ 2708.159384] net_ratelimit: 15 callbacks suppressed
[ 2708.159392] protocol 88fb is buggy, dev hsr_slave_0
[ 2708.169578] protocol 88fb is buggy, dev hsr_slave_0
[ 2708.174647] protocol 88fb is buggy, dev hsr_slave_1
19:34:07 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0)

19:34:07 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8004550f, &(0x7f0000000240)={0x10300})

19:34:07 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0xffff, &(0x7f0000000040)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x50400, 0x0)
fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
sendmsg$netlink(r3, &(0x7f0000000200)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB='o\x00'], 0x18c}], 0x1, &(0x7f0000000180)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18, 0x1}, 0x8880)
ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000000240)={0x6, "3189e529e12b5e592671b81889a0cd9b7d8671f6cc44c8b674bb7d6b4163a7a6", 0x2, 0x1})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})
timerfd_create(0xffffffffffffffff, 0x80000)

19:34:07 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x10000000000000})

19:34:07 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]})

19:34:07 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x300000000000000})

19:34:07 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80085504, &(0x7f0000000240)={0x10300})

[ 2708.866079] binder: 5152:5159 ioctl c0306201 200001c0 returned -14
[ 2708.883828] binder_alloc: binder_alloc_mmap_handler: 5152 20001000-20004000 already mapped failed -16
[ 2708.905053] binder: BINDER_SET_CONTEXT_MGR already set
19:34:07 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]})

19:34:07 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x2000000})

[ 2708.918390] binder: 5152:5159 ioctl 40046207 0 returned -16
[ 2708.956031] binder_alloc: 5152: binder_alloc_buf, no vma
19:34:07 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x1000000})

[ 2708.989641] binder: 5152:5174 transaction failed 29189/-3, size 0-0 line 3035
[ 2709.028521] binder: undelivered transaction 4392, process died.
19:34:07 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]})

[ 2709.035619] binder: 5152:5174 ioctl c0306201 200001c0 returned -14
19:34:07 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xffffff7f})

[ 2709.839383] protocol 88fb is buggy, dev hsr_slave_0
[ 2709.839442] protocol 88fb is buggy, dev hsr_slave_0
[ 2709.844491] protocol 88fb is buggy, dev hsr_slave_1
[ 2709.849631] protocol 88fb is buggy, dev hsr_slave_1
[ 2709.859747] protocol 88fb is buggy, dev hsr_slave_0
[ 2709.864811] protocol 88fb is buggy, dev hsr_slave_1
19:34:08 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0)

19:34:08 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000240)={0x10300})

19:34:08 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x1)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x20000)
ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000140)={0x2, 0x3})
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2100, 0x0)
getpeername$netlink(r4, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:08 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x40000000})

19:34:08 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]})

19:34:08 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xa1})

19:34:08 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})

[ 2710.014814] binder: 5197:5198 ioctl c0306201 200001c0 returned -14
19:34:08 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x100000})

19:34:08 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xa1000000})

19:34:08 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc01855a1, &(0x7f0000000240)={0x10300})

[ 2710.085286] binder_alloc: binder_alloc_mmap_handler: 5197 20001000-20004000 already mapped failed -16
[ 2710.098764] binder: BINDER_SET_CONTEXT_MGR already set
19:34:08 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xfffffdfd})

[ 2710.175660] binder_alloc: 5197: binder_alloc_buf, no vma
[ 2710.213453] binder: 5197:5214 ioctl 40046207 0 returned -16
19:34:08 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]})

[ 2710.231883] binder: 5197:5215 transaction failed 29189/-3, size 0-0 line 3035
[ 2710.239399] protocol 88fb is buggy, dev hsr_slave_0
[ 2710.288856] binder: undelivered transaction 4395, process died.
[ 2710.295774] binder: 5197:5215 ioctl c0306201 200001c0 returned -14
19:34:09 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0)

19:34:09 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x10})

19:34:09 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x551f, &(0x7f0000000240)={0x10300})

19:34:09 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x2000000})

19:34:09 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]})

19:34:09 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008910, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xfffffffffffff801, 0x10000)
fcntl$getownex(r2, 0x10, &(0x7f0000001680)={0x0, <r4=>0x0})
r5 = geteuid()
lstat(&(0x7f0000001dc0)='./file0\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = getpgid(0xffffffffffffffff)
fstat(r2, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
lstat(&(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001b00)=<r10=>0x0)
stat(&(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
getresgid(&(0x7f0000001c00), &(0x7f0000001c40), &(0x7f0000001c80)=<r12=>0x0)
r13 = getpid()
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001cc0)={0x0, <r14=>0x0}, &(0x7f0000001d00)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001d40)={0x0, 0x0, <r15=>0x0}, &(0x7f0000001d80)=0xc)
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000002240)=<r16=>0x0)
lstat(&(0x7f0000001e00)='./file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, <r17=>0x0})
getresgid(&(0x7f0000001ec0), &(0x7f0000001f00)=<r18=>0x0, &(0x7f0000001f40))
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000039c0)=<r19=>0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003a00)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r20=>0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000003b00)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003b40)={0x0, 0x0, <r21=>0x0}, &(0x7f0000003b80)=0xc)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000003bc0)=<r22=>0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003c00)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r23=>0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000003d00)=0xe8)
fstat(r1, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r24=>0x0})
r25 = gettid()
r26 = getuid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003dc0)={0x0, 0x0, <r27=>0x0}, &(0x7f0000003e00)=0xc)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000003e40)=<r28=>0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000003f80)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003fc0)={0x0, 0x0, <r30=>0x0}, &(0x7f0000004000)=0xc)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000006380)=<r31=>0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000063c0)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r32=>0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f00000064c0)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000006500)={0x0, 0x0, <r33=>0x0}, &(0x7f0000006540)=0xc)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000006580)=<r34=>0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000065c0)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r35=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f00000066c0)=0xe8)
r36 = getegid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000006700)={<r37=>0x0}, &(0x7f0000006740)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000006780)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r38=>0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000006880)=0xe8)
r39 = getgid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000008ec0)={<r40=>0x0}, &(0x7f0000008f00)=0xc)
fstat(r0, &(0x7f0000008f40)={0x0, 0x0, 0x0, 0x0, <r41=>0x0})
lstat(&(0x7f0000008fc0)='./file0\x00', &(0x7f0000009000)={0x0, 0x0, 0x0, 0x0, 0x0, <r42=>0x0})
sendmmsg$unix(r3, &(0x7f00000090c0)=[{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000100)="2cfd0570dc20e2e646bf793bedaf1fe6871a46f1e56ff4eaf60e97dbbe3e18902ee26cdee51acdc567a6967e823d4f3ffc8199632ee4f37ac6c866c7162750162ca23068ac588b3658b5a62b4ba916d295fd146905bba2b0aff55ada8ed95fa3177e09ebe9add3f447843480ac9ffd90e37038a196d115b14e74a7e6373fac81cb0274e8", 0x84}, {&(0x7f0000000200)="47ac2ea54e5ae33a70d89535584f80e0324410f55dd8cdea1d1aec83dd7f42c9f1c1e706dca5eb286dd58b3f20a57d914ceaaf1dd6f0b8f03a81517e3b56309b53e659503fd6daa20582514e5ce82d8c6a88d2b18a88cb7696b0813e9f27f654187213abed5136bb71e4777528d0ec4e01979cbf05ac87f07a91943f689e494a8c57da41e5638a5e6847b18f881835f6af76d082ada6b85efcc71964c8da6de8bbebb10ca6f88be9c24c6e42dc7543d24be4", 0xb2}, {&(0x7f0000000380)="8662114daba6b5adf5e37828ae5d04e12db355e9075536459696d7da1e82e41cc403a30986926b37acaba9b2767e045968042dc825ae8d4d7a32b4ee3d8368d6abdd28e2b9c59c96fbbd42cdc9d7157481b4c61d7798473d9e556d30b3ee914df458cc135d41ea85", 0x68}, {&(0x7f0000000400)="890cd4686b0df54bcb27748f380036c82c1e954da2dd5649129158aeda03eafc0ad91c99288e776dbce8867ea08ebc73325a79fbb01b745c47e37b853129ac017f9cde41f27d82f3b29d9102f0de0f78e5bc03", 0x53}], 0x4, 0x0, 0x0, 0x4}, {&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000000500)="e926fc", 0x3}, {&(0x7f0000000540)="e8c12121efa83f82a7e91092048d844653788e39f323f7660be5fe1d8a89df0e8331f94ef1821779cae4dc67ad995793f6a01f7bad5f7237dca98510e971d4a932b4b9622afe9774942e3781e70cc61366797d1d9a97bed2cbe4ea2b24cd8350a6a1959fc10d59c29781945bab918c726847f71c95d302ea13fb1d25635328ca7aef370996309f2b9bd2cbf2c0a800f4952a8cc6e55919dcf60b2b611072abf040d078027e66aef7456d996349305f78e6d32a0fb15316f941dae72d83c9", 0xbe}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="8fa04caf802b4d70c47c09a703399371428de37298d337275c4ee87664adbc62ac", 0x21}], 0x4, &(0x7f0000001780)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x18, 0x1, 0x1, [r0]}], 0x38, 0x10}, {&(0x7f00000017c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000001840)="cc22e0164a75f3b75b27556d73f98c7bd003b22811938fa0337238eeb43153404d707a2d5f83ca1a43bc52e2e4781c74d5bb3ba550b4f4fe6949e14cf39350fc0040ee71567faa54e58355c371f59b2673e4bf95baa64f607971c97991d7452b4140f94b0bf792d8dd45607deee4d6aa7986801aa82e7a444f", 0x79}, {&(0x7f00000018c0)="b67a5c967e81b249f6ecb9c11d2a2329faa0cabd1718b1b0196237188bdeee141326ce057ddf70c469794b68c3415713341071422008c607421d340ce08b7091d71a1a853c5c02a4b7c5aa785c0576740626127f765a3f81b2b35e4efbc6a974e0f082b58b428d6cf5ab322efc7cd0bcf8fefa738d90f02a438aabcae039578f393594156a7c7e6f528dfd6c88b6c9575e9ba34f1ba60d622f9a5ad1678f84", 0x9f}], 0x2, &(0x7f0000001f80)=[@rights={0x18, 0x1, 0x1, [r2]}, @rights={0x28, 0x1, 0x1, [r2, r0, r0, r1, r0, r2]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @rights={0x18, 0x1, 0x1, [r2]}, @cred={0x20, 0x1, 0x2, r16, r17, r18}], 0xd8, 0x4}, {&(0x7f0000002080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003640)=[{&(0x7f0000009280)="8a17b8671cc4115945638db8373cc0b2d2a3e9f8a8c220b708578e44e6a203ca8b2032d7bf9d441aab704194ae8e1133db6e30660cee33316d10bb4dd827b3c06d145e85ec96ce7d36c8ac3a6a2de8d8bb87a55892732482a8e6ff40f96c28612b95c2009d031d7210ebfc07b786ed1b2b6863fc59f1b3b0378ef836e506526f03d31c27ad55992cca25616abcd23b65c82eb700312658c4a9645859c1e8648bff647c2681512df407b5ace7a45285ddb39ace132a590bccd450d39a240541e6e918c44381f4691521df2b3b1b2cb10456ba8c9c02dea0f011bb0245f8d08a82f8c9baac3fe7cf2f23a3a28ab0b37ebaa0c1209716aa9eefa3dcfc2f4346914ff2a39e0845fd93b5b3a638373178dcc20060c132ee9cdfb988bfa7dc82c9dc772d2e39687a5a0b16a3c119ab6e09ccfd6a56dd4af0714d5d7de289cd729da32559aa74ae467cb29caab9787e8e2f3be8d0de577f8eb39d109a6bd58dc6dbbfc0f2d50ce1b59417dc47525e5b4570e12f883d15395add84cf256e3af8cd61facd0bad1dee3ee65ea95c69bdf4b3b6c24a6efd46aab79e7fdcb775f042a31361749b5c44217caf95aa51a7d0e1108a40c227a3b497cc8eb45c8f628613772896dfe917bd8708ed4e60c88f96383f58ed7b3159fa7fdd9f3312d0eda221f37d1a243bdc15bb5488b1cfda3a0850e97e1f208451282cc3e9789023af209fa21a6d8c0de3e8c879d1eb60230a8ec98275fe56d3e8b41844fa9ba8c7aa05120651577adac7a8642c8efaa6bd646f961a102d5536d82c32c552ff046448ef7766b7b3f2f88e88c852256ddaf933b505e530b7009820af78f6f038c6fc04a590dd614ac600894673449f0de27328230cca878e9163dccdb5a3d54c1f33d69744fe483a6d50bb15d4d69ff730406603e987df94d63b3c142adc7117ccb917b6951c6676305fcd833340851cb5a563b05a6f8beb1cfb40b4d695a0323e9050e7ca4e39ec6b58eaa3529ae900c4488c693e9a6443c1474c141678bc9e85efc0c57c3e91c8f04e4e80a8d576ccfd3831585ef32ee3e253f2dc47e2ad4d5b333393c9394e0a1e850177a97df1dd7f46d097c4f228f82026dbf61322859ebfb1f7a5b3cfc45be86f972b360dae10bd87f2e5213fb855ad356763ab42cd7f0b61bfaa6766a492261ef1846b19948122a807d39f2ae47254b318259f73f11411b6f663f94c7680a9a33629f4768aa6eb6c343cd609b9234a26c2bb3510235895a21b05a5d5a6ffbbbf9d44470fafebf0e14d82054dca46a5c32e05064524fc7513c93375862b05ee80b0ea5aa78f0ec185329645c5574f470eb74c11e7dd96b6207bf176362e4bdef20822696aac7d7a91efac2c3a306974a96d23fe2f1fb92633838536a095314f6f643a52fdd665faefadb5793200dc36ee95f83847555383722874fb7255a27e3f971459f677589e020315a454791131c139984438324d6de2cce40eec8807e138e463ff0070e5664f472fe40bbc408d42691709d640c0e0aa2913d89f5adc908a4b22b834f49c5945690f94e686c51778461d48559225a5d2c8a676ba97717f379be09f715e51371c45bfe66e4bcc5391584f6eef12336d96724743276034fe12cf26e8c40bca15fa11b21fb603fb3593eccf0a9a0eb45038d0c4e8bd01bc3e344cf7582bb3fef6a8c8cf19a63d2b9d0f2f28e14be0550bc62ac373a60f1e4fd0552b91b0f4bf0adf4487bbfdc4c0aebac0bdc63fb6ccb0502833ab74759db92fbe42fa9d274ffa8c366c0c16346b6d8b838f17c414a31f12a643d1dfa8303c0471c938bd630af9e72383e3865d729dbff46da9fa29b6e8efeace64dd40e4691b658b332d39f696fa4b0b7e73304a4f2d4cfbdbbc9ff6d52715c36d76d3ad8edcc212ed80a23ef91202880706833c308366920465814fd08dd93349e2f0a44a18eff09b3933126b76698c999eb2b8985b2eae03240f1e022fc1f88faaca333bebbd8f5d1cffcfba5f7b9486fb7d0e6965757a69b543162bd5a47819c349291a261858e99f1c315c570c6feecd2f556f5659eb6a4940c5b4ed0bc11c8f27e6cfd339239f6cf1ccc2400301cc2dca5a44118c8a3cb4098a6225e4ea5d62fd7f804cff07cd762aa7adfdd22e8175bb1b60e735c5881f9a9c63c4c0acf2371b23ec1d75de36a6d3d62851a8eb08292ef03ff35183b016541a2b74d99ab912d23c64a5e15dd85677a447d89c16089446b48ed63f63bb52e75f2a197f82ab14a57fb9b4689ff8b22299e683dc8ef56d520a9b24d5fb5942d326b12186fefa5da8017cc797bf897cbd2052d3a37d87c2f3216684b13429cd86a0f4385a787921a694f07cbe2daf740a766d4a5ea6044cea5876a403c6659ddde07ae4735333e0d80e98b5872daf5d529d5c95e5395e9f8960a1614360ad7cc5c20424fe822a863eaf8d0b37f85cc99b78e1faacf130685b7a782823a713b19f5f62358746292d61c86c1438744f477e1e8473d803a0605d32136d1b09a2db2a7be07dc1bbeb8332f94facde8df03b1d90452c93da532f63b8321b46572916fcde9d53151c9218477ec0941fe233a4d65ef970fc94987ed381f62463a89d8f2227f4700b478b7e3100e44d193a01e2a2e1ec61858c98e07f120b3c437f630d5641ab8dc6ad6e9e9e8f0f0cee0eb9bc4dcd0dd4a46a8558cf46c1703541bab333a60f3ca2075bc7a75d3ccc10e46263c41c9a3f43d9eca96bf5c13c779ae94e6be09d820dcc1cd8f9793438b7f04708dcd6f27d6c7b5ab71d0891ff478c9330ad222a36c92e1b4f43d4799151de99e18e30386eb19721dd3ed70abbba3b1d6ce79ea7a3f23c9cfb9c976635b780c4128059bfddc90d42a63bcb2de28fa22a925eaaf429ecf1c7e98a78582bc505a8bf0d87d3ecedb0881bd8a250a89849d73001d27d50eeb0697a16338c6b3fe5c31ae2be1ea055e1495c728c8f4c1f5b973d2f3884dd5a59f695fe53cdf52c301ec736cf25c79e8dbd469a91e71a12a1599b7f05a5ad0d77c3b3036b30811a7a2637e47e935478cfd79d8fdd82608f9e240dd77942e66e5e7d579434eca3ce0d9831577b7eab52ab9ba17c35347c2fcc3649c2ee361ac1efed912925a92adb704d0ce851637a10033a6fe2949e0a3410321a2e8df7797b67d803b899d029bed1095050fff6cdb450f00f70aa592bc57bab2081836993e62ab9c8712e53c9e869af28e254e80549f6888753123c69fc1d1ea1f2fa3e3331fdee1ab4d481b5103eff7d30bb40d9624b90514a2bd99b8b73816d8111acd26f1737c7ca66ad88a1f51273a8e2cc2a421e18c5f58f5baf135296627945f4a5e77e0fab25dfa0c8c16fa2165cb3ac5ce1fbba54c712c0e9ffcf0b4943164de7828a10ef40e93ec6a802dd772cc432398761a7276c358776d84491221581d2a8700be81e1b4f72a142c343fb6bd0e93e7b07dd50d98b594f4b6b9cba594beb8af3de29cca161824db630afd82baf50bba65acf6da43461edaa3f7da34e94de2a287fa2d8fef1a18c18edcd7fe83c629ce400bfa8497a0a056b78843cf7603b98d50f18976dad766a0f28de703d1cc3ac6cd2d425be336acb64d2b81a0880d6f6d166ce8101884bf35a4325fa78e578aaae8cb40b2346d3c942a36fad9f5af109077e9ad425c4bd2a7a2554109eba7f5d6a90f4759ed52167c3bf61f9114f85bf67df1ab55c5bc51330d76517bc3823beb329254a7753c1306aec0101c050dd984da9e444cc1f3d86eea78e19d016033a980ba5e9919092d60f8033de49a91520eaf1dbbe5af8a1c65c9c5e74e13422278aba675aabab9c92fdda007233f0ae4498729cdca4a781857f6a33d38a7e138a17b025c35e897b95ef0fcb2eded05c5d336a0dd2d8d4b57c67d0766222e1e957faff1c31b68152312b3dfaa4f92a23d1fb625853dc351dd81303aadbb8750c8e4370b195cda12aa6364671a15e7337859b5963fe4a675d463cb2dfa16b6bfbe7fa0bd5b1169f927f038d5e5488705ff311878f6da5f36f929a4bf4c0ac9628a559f88e0b7e7eef82a62645d693074d6688235965a4f19e0ad172e7444df955cfb6ef666dc798c5c2304e795712fa6c55bba144da1ff808d16f6a6931bc002940e3defa2f6fa6bbc9fa6f150f2a7ce87252cfd26f4f3f1834cb21f3dcc116d4573f02b6d14db6a8b419f2fed8b9d5da0aa69a658d3a4c735d01a0f05d26df4d903f52c763ee649080548bb376e9d8669614279f65ad9c4f2398cc86f7f2100ae4bfdb917a08604b8ec0f8f28ce4f58a5962e21e3781282394f56e386675e2699ed8d8b232df35856943b0be0327a4ffff6d6d3c52f650efe0d6e51f9c50ae2edddf6bc60733ab550785ba562d354a9623669ce4d3a3b72cab6cd10d4791ea0d43f4d12fd9e7aff9db0a1e88eb21e82ffdb57290fbb9f4e8ffaa849682f357b4ba385c4817980fbd03dd898cefc424f02735857068f6128b1f065649f23d8aa51ae170ad6720f2c14a75de17098cad0a31be7eb220f32dd136ef4e80b3caa9da52034645704471a6dbf42d1b052c47d63b3759b8122d12c9d98c7f0abb11dc938d33cce5dce0fc7cde4a03a1b0ad03789b39249794832cea7e28e3a4848dec12fea1b91031f540735fa4cbaad0a10831f4d59b99ec72a927a72a1f6cd3c0061d1514ca3dc9e21dba206ff6e06c562327011174b456d960bb04d3768349813b2e16af92319adc72e5deefa214fe6dad0c6247ed3d9fdce928bcd7fc1c780f1ea1902383ce9a55f5e957e866760671b4bc08a54d240c0f05870ddeb5fa40602d76726e66075d9de39a1f451c25f5f52adc50139c5b927ff655f9b5bd2af85bbf0cea330a37870889918fac64abd1629c7eb7a271de535b90845b96699fc39fb55364294d89309ee2af775c342513bb171062765cace962e37c784edb7168ff81168c2b9ec77faaf2d4fa2706d71cb57d314f2f78a604d4e8ceeb48b3355db1d7435c793453073a3ef5e4ee3df2ce00755e64ce742960700e743e8197a86be7766070f78b6ce7a21b5e409a29f826a89a10c3af7a577715567bbcc05f53064ca4b36654d8d8a3bb69e1108f86ed6d21e8d1433e4ef7de372c967daa769a070e7792cc3dd96745ff2777e9b5ca88006e9a78047341ba4fc3788adfc621ccebe8db5294e158800441946ecbbd9cb822e4602ce4e0aab9feae8dc3710465b976a42408bcbbdaa48e3ed4fddbb30bea6043f2e3738617deda3f3434fe60b9ac3cbc6fe07388d14ac603556c8f7a1e54c0acceb309d6b949422587e15afcf3b6186b70d148bfbe7345f820e65a01dbcb368defa94b119b06bd923512db5071f814a65b9813bfdde0c7f6963343ca60bcc10bbc0802da2b5447340b74e4336ef1bd78dbc862ab13e56dd217ea686c9c9cd4b3bdb297c9af9d99fa6cf4eabfa4e40a023c28448f955637739234c5bf6110000ac43fed8beb6c5bcfa6e809f3330b7a5933e673fd4f7fed1faa8b3a4955473c0f3f6c6767d7c5daef26cfa108229d48068bb08dceb00b9d6d7e98f9d5a68d230f0fdc630996af5964fd98414240e53a5d1377db7611459570936bb31418632624b1874fa9f87a81776691d5d7d084f97fe58306f655b233d0288c1d64d6c01ef0787886c1adde59cb8b624a44755fb5ed23412170dd17e626c0a6277722e8ac4247c0e5e51a51f23b4e1a9c172cd327f699d9dd5648230e4624c4bf3ffb425ab125123a859e313c587bf1c9ac69235c775f20314f645cf329e383d1195882acd4883d3fbe57fc48504e8f", 0x1000}, {&(0x7f0000003100)="059b56c94add35902e488ccf671cf097c09a88348b57bd36992b20417d7d79f4bfc2d84d21b821def2a799c48bd746e6020cf0b898b4e726b0f0fb93e90cd2f1c12eb36fb063f3d4be68f64d6769cb014846e3174f5f07262721f3e93a595929add9c7c376313ce1396bc3450d27c82fae07222e56b52a6df07cc10711162aaf1f729eb67dc429113e7aa9ef50469f5fd0f394f8e9f648b1a475ac5b07523e31c2a8f9430d5adf41b120ed39561fe7fc9743151a0721cc29dbc574e932ab8c31988cd14a037cc08aa890c63929cda8018d1619d90d60f5352362437b22", 0xdd}, {&(0x7f0000003200)="38ffca91989a0ccf643491c40a6ce8002ad02b2b68f6eb98a7817b0b3e7fc4d071ed1ca6d1fcfe319df56837a890130f13928bff155b793b4dc07e9faab78de9ab67f520484b359dfd90c1548547dd36b6ca7ee04ffbe3762526b20ea9bf4638a37be7b91a44c8cc948207e5fc55a96ec574ec65067912916db8d5ea38270daf0b4b820b5cdff55e5e9bb328affabb692ab79e06b0011ca83c0811ac4f005bd3a9083a09a25305aa5b0f264d415a6c71eb2eb20a1ee59cefeb2da1789158693da8d77e4485b8a6534e12f44455ddf9cc55d1b8d6a616f08e9a161d867a9860cd36f4568cf67d3311bf4c59e0", 0xec}, {&(0x7f0000003300)="f058bd3e589aad753a0b20f7570e009d2cfb0dfc9cdf03b5a769f48bcf9987fb390a287742185948ea292fbff40e4ee147b618f36c4dd8d4027fcd422233b6a1ac7cb435dd8bb7164f23d84382d3bfbde736092c64dc6ca49c4994e4425eeab3d0435d8c075bcde966d9550bb31d31b101922e2a9e129f603f6a4f0a35dfc318c9e5770424f8d99cc415e4d0961d4032ae0a1b3e36423b0941d9fa883c0729becd49937f0d6319158e8a7edd31a528ee7a2c0205bfbfd2e00e50d6cd9d8396e65ddf99c0", 0xc4}, {&(0x7f0000003400)="79b59a56a30f5a134c2e9f9e9e626e11b95a57e17b08e15c59b1848befcea48ddece7542fb2e9dae06a6a61d942f07e3f82af95e5c2aae43c80ed45823ad4220eb238d81536af7c7f5e362f673bb1dc3beb3b5b40f479eae5f6e1f8f05e59327b45a1d154f9222d8b9bde2036b859cf79af90b17691614f64b798bcb32fa8e1902afc8f3b774cdc0e7", 0x89}, {&(0x7f00000034c0)="fe38594c42bfdfea126c507bc14afe4fe339c5d2a1c8fe8c0f0768d7d6ebcf0def25a2689d4d9a6b1a15200632dbd1be599295fd3708c1e55b49b5a39389b7021ed620f60a39ba7d1c78263150", 0x4d}, {&(0x7f0000003540)="1b5492bb775702589932f495126a353eb4c85998b7131e4cd26279835ea545aae254bba349053502e4775ccace89d9c652db1785560d37a13ba064038212a38b04a4db81a327132cccb430ef0b65fc06974bad99eb3c6a286aaa285918305e44244530248c35330b0aab2a091671160f61c50047ca4633b3cf95c56338e112150191a0b9b2a9e1562da09f07eb08459ed48b9e3a7b", 0x95}, {&(0x7f0000003600)="5aa4701ba40f8f9ada129c8d86350f289e", 0x11}], 0x8, 0x0, 0x0, 0x8081}, {&(0x7f00000036c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003940)=[{&(0x7f0000003740)="3ff777a699e6ce874de0d642206ceea8bc57faecc33d7a790bbc895ca88e6411e1144750077fea53c67d595f2964024de8f3c42aa66b6900b7d504078eff56500f3decdfa98d37462d12fd00f038e41886506dfaf8c03658c0ebe79bf81ca86556c7c246109542fe916929fff0942a84f1d36f49f4f41be2b3553f38c43a7493b301ddeb4bb4b34a6bf2073759e196b18d2ee1c246e0e5c27d219b69d4ddefbc54f97c14fa65c32775bb485a10d317d3", 0xb0}, {&(0x7f0000003800)="03e3171033dc0b01a88e411167f60ad7e21f4f7afd659dd7c229a91191d880b17770a359140a8b5c5f0efcf9b97094346c78187c08f0456840f85276c24a2c23cae1f594b87f936b534c27778498da918f9b4963e5b744508cca1bb17513366a33c35d", 0x63}, {&(0x7f0000003880)="02ef1de0cfcc5cc84c5de07febf1d597200b1c7e814822f3e47fcdedfe1ae35edee670741faf7bd8b425bfb9c06e19c9aa8c78d54fe790895d3c2539", 0x3c}, {&(0x7f00000038c0)}, {&(0x7f0000003900)="69516bf92f17d633a6bfca62ff564dfbee03d0f3943564b6e7e878339098fd833f20f6c6", 0x24}], 0x5, &(0x7f0000002100)=ANY=[@ANYBLOB="21000000000000000100000002000000ad006687b9540fcdf3699f409c6773d3d6d3988f948c1bc0411d9eaa086bbf51bd85c5e2e899d8366406254f8ef3ae8fbaa9d55c7388e92c71f84e9ec34e8effcfcf78e5643faeca4f2aad8c7d28cb3d6f71a2a9cd7ff0ceeec1e1b2239eb777029de982922f1ed875dfe500000000000000000000000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="0000000018000000040000008a8eed7fa420b473", @ANYRES32=r2, @ANYBLOB="00000000200000000000835101000000020000fc", @ANYRES32=r22, @ANYRES32=r23, @ANYRES32=r24, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r25, @ANYRES32=r26, @ANYRES32=r27, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r28, @ANYRES32=r29, @ANYRES32=r30, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1], 0xc0, 0x8000}, {&(0x7f0000004100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006300)=[{&(0x7f0000004180)="57b18ebf91697b844ff3877cca1fe9e331e9ba0c4e377bea3116ea7ee134670026870103d6", 0x25}, {&(0x7f00000041c0)="1dd7fd5a44d63f14b68711c3f6e43a446dbbe0aaa47d67e1d4a87db4be66d2ccfa0df25cada32243aff91adad46e48f3e2f9a8a03f8944b7dd3b3695c9414388edff01e9ffb942a3b82d601d42f68a5a1828ac70b3eb06cf4621b4d9bedab091ae4170c17e3ffd182290883809acda69146ba817b4b378ecc39c1da8a8", 0x7d}, {&(0x7f0000004240)="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", 0x1000}, {&(0x7f0000005240)}, {&(0x7f0000005280)="ebc8c986ae1631ac9e2d716904d3f6e7b1b7e9907a2d8a1adeaa08aa34789ec2b5e84a9f1bbafe3ca5d7ebc8e82642a28a346f3e8808d92b33c31f1be8a2dc16c10ad85e653e1de882bca01c9175981f80eba8ca6c6f24d451a660fd9a", 0x5d}, {&(0x7f0000005300)="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", 0x1000}], 0x6, &(0x7f00000068c0)=[@rights={0x38, 0x1, 0x1, [r1, r1, r2, r1, r2, r0, r1, r2, r2]}, @cred={0x20, 0x1, 0x2, r31, r32, r33}, @rights={0x20, 0x1, 0x1, [r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r34, r35, r36}, @cred={0x20, 0x1, 0x2, r37, r38, r39}], 0xb8, 0x40001}, {&(0x7f0000006980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008e00)=[{&(0x7f0000006a00)="076234ab58b55a98960cc8f76799cc4e47a72fb14702dbfc71228a543adfe06150a8174af72f5de02f588ec08334c6a7e62590525175ffecae0b91046e9b1f020c40a7f5804142643c3b1a1a21541f14587d3682612d7b8a1270dd3c6ed5e340707090f6d1230ee80d25fa463e1e695dfd3ba6a1229de34865d2de6e1cfbbbc0ab72a326d40a44d339bfa8bc8723a527bf388ad33197a47828bc2a675c7578ab7bc021201c3e", 0xa6}, {&(0x7f0000006ac0)="265a7e4b8cf5a5ad340a8c259419f593570020db3efddf7d9cd334ba1c0b1d984a98502557937cb3fc0f070c086d7a228ea58fdf2937503b9f41913a7d450ff0fd9b0b3959dc04173d", 0x49}, {&(0x7f0000006b40)="8baadbcdf552178732596659fdeb168b17e3ec21eeda44f72533c86f493b391d7ded7712a93c18a94077e6b9c0fa3ee279757735a0d4f9106da89098757f7847a60cfbf6235cd7c1ce13d56b1caf26bcabf379872316c3eeb39295636820647cdf9d76d87f2ed9163bf93101f703e7e74c96626074af6989b0acb7a520811f886eb870411c7358eeb6bf43ebda3c705389efb840b362f20b6489b4e2e21110add04f695679", 0xa5}, {&(0x7f0000006c00)="34133a4409c8e87fbf6d417c0b7c392e4c063b9215767feac24901cc395ac39bdc87bcc82ea81b52c2c196daca5a8586f2749f75565e23c38dd6497e99d50c2eb963f38c00fbc56ae301f73b0dbb73be303af50e", 0x54}, {&(0x7f0000006c80)="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", 0x1000}, {&(0x7f0000007c80)="cd351ab05744f7d9ccafb62c8a51f153e5df638fb1e509cc839e6ca22666b7d8c75113c5e0b8fcfc23196e7ba8913c6fc0abb3d0fd9c0fe36e69bae8ad36fc11426bdb79585db4a9085ff0d0276497e83ebb2372d20a2012933510212397e49914a6262e33a9862476be7ffebf3363d11f69bd0af1051868ce06eb07a7c029852fe1105f62b1df697a7f76eca77f62609a512e840f10cceaa65786fc3123", 0x9e}, {&(0x7f0000007d40)}, {&(0x7f0000007d80)="575c5c245532cc53a6a3a36f87e3ee88c47eb5b6a6709f0ceb65bed91e21a92c020d8db06bd8c99f45ce9fd4bca2476c9d796f90b8674ae237e0043a38f73aee454f99ee0561d4dad36419f187c96052d0630c72131d79", 0x57}, {&(0x7f0000007e00)="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", 0x1000}], 0x9, &(0x7f0000009080)=[@cred={0x20, 0x1, 0x2, r40, r41, r42}], 0x20, 0x20000004}], 0x7, 0x800)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:09 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]})

[ 2711.154917] binder: 5253:5255 ioctl 5429 20001b00 returned -22
19:34:09 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x300})

19:34:09 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x4020940d, &(0x7f0000000240)={0x10300})

19:34:09 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x4000})

[ 2711.258314] binder: 5253:5255 got transaction to context manager from process owning it
19:34:10 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]})

[ 2711.309694] binder: 5253:5255 transaction failed 29201/-22, size 0-0 line 2887
[ 2711.346183] binder: 5253:5255 ioctl c0306201 200001c0 returned -14
[ 2711.378931] binder_alloc: binder_alloc_mmap_handler: 5253 20001000-20004000 already mapped failed -16
[ 2711.399885] binder: 5253:5255 ioctl 5429 20001b00 returned -22
19:34:10 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000240)={0x10300})

[ 2711.446857] binder: BINDER_SET_CONTEXT_MGR already set
[ 2711.475379] binder: 5253:5255 ioctl 40046207 0 returned -16
19:34:10 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, 0x0)

19:34:10 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]})

19:34:10 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x10})

19:34:10 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0)
r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x9, 0x40)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000f40900000000006abd00b264c8f2bd63faa1200f000004000000fa5ccc69fb0e282d3d06b45f444a43acf836643fc154ea21fba35a96ebc7d6be159be37effaf5b8c797be3dd3669fcb551101eb8d28850004c311f0af69d73c14ad891de9005db18bc8bc3e3b6f11205b5c0355b78388a677fdb631a777e98a9"])
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:10 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f0000000240)={0x10300})

19:34:10 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x3})

19:34:10 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x3})

[ 2712.266151] binder: 5297:5299 ioctl c0306201 200001c0 returned -14
[ 2712.300362] binder_alloc: binder_alloc_mmap_handler: 5297 20001000-20004000 already mapped failed -16
19:34:11 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})

19:34:11 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185503, &(0x7f0000000240)={0x10300})

[ 2712.318000] binder: undelivered transaction 4400, process died.
19:34:11 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x4000000000000000})

19:34:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000000000)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:11 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x2})

[ 2712.562938] binder: 5324:5325 ioctl c0306201 200001c0 returned -14
[ 2712.613339] binder_alloc: binder_alloc_mmap_handler: 5324 20001000-20004000 already mapped failed -16
[ 2712.644475] binder_alloc: 5324: binder_alloc_buf, no vma
[ 2712.665946] binder: 5324:5330 transaction failed 29189/-3, size 0-0 line 3035
[ 2712.683717] binder: BINDER_SET_CONTEXT_MGR already set
[ 2712.697293] binder: undelivered transaction 4402, process died.
[ 2712.708438] binder: 5324:5325 ioctl 40046207 0 returned -16
[ 2712.710398] binder: 5324:5330 ioctl c0306201 200001c0 returned -14
19:34:11 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)

19:34:11 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]})

19:34:11 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10500})

19:34:11 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xffffff7f00000000})

19:34:11 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x10000000000000})

19:34:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x7, 0x1, 0x4}, 0xc)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0x32, @dev={0xac, 0x14, 0x14, 0xe}, 0x4e22, 0x4, 'dh\x00', 0x36, 0x3f, 0x50}, {@broadcast, 0x4e20, 0x3, 0x48, 0x101, 0x8}}, 0x44)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f0000000180)=0x1e)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000200)={0x5, 0xfff, 0xcc7}, 0xc)
r3 = semget(0x0, 0x0, 0x20)
r4 = add_key(&(0x7f0000000240)='cifs.idmap\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$get_keyring_id(0x0, r4, 0x5)
semctl$GETNCNT(r3, 0x4, 0xe, &(0x7f0000000080)=""/60)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2713.330606] IPVS: set_ctl: invalid protocol: 50 172.20.20.14:20002
19:34:12 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

19:34:12 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10302})

19:34:12 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x1000000000000})

[ 2713.374937] binder: 5341:5343 ioctl c0306201 200001c0 returned -14
[ 2713.403787] IPVS: set_ctl: invalid protocol: 50 172.20.20.14:20002
19:34:12 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x3f000000})

[ 2713.462996] binder: BINDER_SET_CONTEXT_MGR already set
[ 2713.468328] binder: 5341:5354 ioctl 40046207 0 returned -16
[ 2713.519864] binder_alloc: 5341: binder_alloc_buf, no vma
19:34:12 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]})

[ 2713.562075] binder: 5341:5364 transaction failed 29189/-3, size 0-0 line 3035
19:34:12 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x3000000})

[ 2713.603157] binder: undelivered transaction 4405, process died.
[ 2713.610440] binder: 5341:5364 ioctl c0306201 200001c0 returned -14
[ 2713.999384] net_ratelimit: 12 callbacks suppressed
[ 2713.999393] protocol 88fb is buggy, dev hsr_slave_0
[ 2713.999465] protocol 88fb is buggy, dev hsr_slave_0
[ 2714.004416] protocol 88fb is buggy, dev hsr_slave_1
[ 2714.009543] protocol 88fb is buggy, dev hsr_slave_1
[ 2714.024746] protocol 88fb is buggy, dev hsr_slave_0
[ 2714.029889] protocol 88fb is buggy, dev hsr_slave_1
19:34:13 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000180)=""/4096)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x280000)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)

19:34:13 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10b00})

19:34:13 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x4000000000000000})

19:34:13 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)

19:34:13 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]})

19:34:13 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xfdfdffff})

19:34:13 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x2})

[ 2714.418484] binder_alloc: binder_alloc_mmap_handler: 5392 20001000-20004000 already mapped failed -16
19:34:13 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10102})

19:34:13 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]})

[ 2714.463480] binder: BINDER_SET_CONTEXT_MGR already set
19:34:13 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xfdfdffff00000000})

[ 2714.490617] binder: 5392:5393 ioctl 40046207 0 returned -16
19:34:13 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000000c0))
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = gettid()
sched_setparam(r2, &(0x7f0000000040)=0x9)
syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x10001, 0x200400)
r3 = syz_open_dev$binder(0x0, 0x0, 0x7fe)
syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x8, 0x200000)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000005000000ff0000000000000000000000000000000000000000000000000368dadb2ef3f4fe6ee33d1ff1e45d5fce887df4ca794165dcd25ca38a76e0ffacd57c22f1471f86c23f2209706bdeae4787656ac1ae3f67f853b8e654fcaf9bf3593c618cac11cb60229da753b7b7e6cb6f765454c212ef7440b1806c531a9bffb27384d868d3ede741edddcd2fe1d1c666fc5191c5c2e6bc872781881af549becb8068660d06ed6d27e170f24c0f2d2bdd872de33b4ce54fed6c2052d38532beeee6540c9dd05ef711260b5e97045b093c3bd9e2af", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:13 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x3f00000000000000})

[ 2714.688688] binder: 5419:5421 transaction failed 29189/-22, size 0-0 line 2896
[ 2714.722637] binder: 5419:5421 ioctl c0306201 200001c0 returned -14
[ 2715.119374] protocol 88fb is buggy, dev hsr_slave_0
[ 2715.124488] protocol 88fb is buggy, dev hsr_slave_1
19:34:14 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0xffffffffffffffd0, &(0x7f00000000c0)={0xfffffffffffffffd}, 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x2000000000000}, 0x0, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x305001, 0x0)
ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000080)=0x1)
syz_extract_tcp_res(&(0x7f0000000000), 0x1, 0x81)

19:34:14 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]})

19:34:14 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10900})

19:34:14 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xfdfdffff})

19:34:14 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xfdfdffff00000000})

19:34:14 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3, 0x2)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000080)={0xa, 0x1, 0x1, 0x1f}, 0xa)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:14 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10303})

19:34:14 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x100000})

19:34:14 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]})

[ 2715.443142] binder: 5439:5441 transaction failed 29189/-22, size 0-0 line 2896
[ 2715.493283] binder: 5439:5441 ioctl c0306201 200001c0 returned -14
[ 2715.537312] binder: 5439:5454 transaction failed 29189/-22, size 0-0 line 2896
[ 2715.567032] vhci_hcd: default hub control req: 0303 v0001 i0000 l0
19:34:14 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x1000000})

19:34:14 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]})

[ 2715.586127] binder: 5439:5454 ioctl c0306201 200001c0 returned -14
[ 2715.601965] vhci_hcd: default hub control req: 0303 v0001 i0000 l0
19:34:14 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req={0x0, 0x8000, 0x8000000, 0x9}, 0x10)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)
getitimer(0x1, &(0x7f0000000280))
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0)
mq_timedsend(r1, &(0x7f0000000180)="31ddb2af6c65e1f1ac1074879392c7476d5905211b90a0ccab5e5452321fe9270c2ba328f965a11024ce21f15d8838405dd41e4dbd2a0ff2facd6743116f4165fefb4757a7a79b54eab842d1a1052698d737c59f8eb6fe4db9776b1946ffd0a77b6bc4c44945b6d54e5846af1459f35bfad191b3bc671e0050159bde2c6179c51dc67f7290340614e96a3318163aa27ec4a0c24d059d37a1d680a984adfda7bb6d6e2797f9a98356f8b3a76bf6e1c172dd304bcaab6ccbdbe6a5a0e38b106b6d42e4b9b1629039f61f805f2d9f6835bd7d19cc3df0edd446fb4dc2a294d54c47c92a", 0xe2, 0x81, &(0x7f0000000040))
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe8, r2, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xac, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x88a, 0x7, @ipv4={[], [], @multicast2}, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @local, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @remote, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x4f2e}}}}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4840)

19:34:14 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = request_key(&(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='{\x00', 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r2)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000480)=@assoc_value={<r5=>0x0, 0x80000000}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000500)={r5, 0x3f}, 0x8)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r6=>r0})
setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f0000000080)={{0x6, 0x7fffffff}, 0x60}, 0x10)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="006340400000003457fc8e04521089b01d700ab293900000f2ff00000000000000130700000000000000000000000000000000000000000000004d72c5be356c520442", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})
timer_create(0x5, &(0x7f0000000200)={0x0, 0x34, 0x2, @thr={&(0x7f00000000c0)="05519be1bd3aca384418f941d24939652c7aca68b36a5a440c36e34fae1433976d", &(0x7f0000000100)="363956198caf6c28ec38f3550441bba7cf6ff2716bad1f5d231dc6677356dd537f41281ff7f663dbaf4d2497d5e656b440b4cb75312ec9ebf2c76a543be62a8516c1f117738207b50bf5d7b612b12c5201e211ac1f54375054161616b8037d6e4f018d146ad3d9832d8db4a60ef872e4813d7563b60b7666c6a45db91c76075ff8b7eebebb76f8b74112edf5e1a7cb735a71a3ee2dfa3a7dee97c41bd95a366cb9e91e51a17c81c03d57c8161530826f18a13b4ab3e75a987bf3"}}, &(0x7f0000000240))

19:34:14 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xa1})

19:34:14 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x103a1})

19:34:14 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]})

[ 2715.814409] binder: 5474:5475 got transaction to invalid handle
[ 2715.830793] usb usb8: usbfs: process 5479 (syz-executor1) did not claim interface 0 before use
[ 2715.838028] binder: 5474:5475 transaction failed 29201/-22, size 0-0 line 2896
19:34:14 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x3f00})

19:34:14 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})

[ 2715.866459] binder: 5474:5475 ioctl c0306201 200001c0 returned -14
[ 2715.892487] usb usb8: usbfs: process 5486 (syz-executor1) did not claim interface 0 before use
[ 2715.908541] binder_alloc: binder_alloc_mmap_handler: 5474 20001000-20004000 already mapped failed -16
19:34:14 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x100000000000000})

[ 2715.951426] binder: 5474:5484 got transaction to invalid handle
[ 2715.952188] binder: BINDER_SET_CONTEXT_MGR already set
[ 2715.978958] binder: 5474:5484 transaction failed 29201/-22, size 0-0 line 2896
19:34:14 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xffffffff00000000})

19:34:14 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]})

[ 2716.017393] binder: 5474:5475 ioctl 40046207 0 returned -16
[ 2716.028020] binder: 5474:5484 ioctl c0306201 200001c0 returned -14
[ 2716.079363] protocol 88fb is buggy, dev hsr_slave_0
[ 2716.079396] protocol 88fb is buggy, dev hsr_slave_0
19:34:14 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x101500, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x3, @local, 0xffffffff}, @in={0x2, 0x4e22, @rand_addr=0x80000001}, @in6={0xa, 0x4e24, 0x5, @local, 0x7}], 0x48)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0063404000000000000000002bcb60640000000000000000050000000016000000000000000000000000f6ffffffffffffff0000e31147eaea305979837ca14f03e2f26966ea5ffb96376e3197d2ea5facc48e8a60561cb0473f06458a629a3561583200dda11c09491eb15b643f500c5e68485321b342d7a26c60c9777b381c278ec634ca4a024cb5a11ec1", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x9f, 0x20000240, &(0x7f0000000080)="7a7204947b18c4b70670203af600a1fb9623156cb1576fa6bb76dda50f8295889f0afe1bec056378b57ae02a07dde9c68b6405ccb0615ad62be53884e51bc56c0c33de3088df8b02188110b02700906c91e5d5ae4225098f0a7a31f34c254bd63b8b6e91a7c4935d9f24d396cd2b16317c6a45e79e5e4a4b40f29000000400003dec4e77d99297336aae54e02219c5ac70781e3b81ca690e0fb82e69897e6b"})

19:34:14 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x200000000000000})

[ 2716.270156] binder: 5512:5513 transaction failed 29201/-28, size -2814749767106560-281474976710655 line 3035
[ 2716.281346] binder: 5512:5513 ioctl c0306201 200001c0 returned -14
[ 2716.291041] binder_alloc: binder_alloc_mmap_handler: 5512 20001000-20004000 already mapped failed -16
[ 2716.301013] binder: BINDER_SET_CONTEXT_MGR already set
[ 2716.307731] binder: 5512:5513 ioctl 40046207 0 returned -16
[ 2716.314424] binder_alloc: 5512: binder_alloc_buf, no vma
[ 2716.320248] binder: 5512:5514 transaction failed 29189/-3, size -2814749767106560-281474976710655 line 3035
[ 2716.330815] binder: 5512:5514 ioctl c0306201 200001c0 returned -14
19:34:15 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = semget$private(0x0, 0x4, 0x104)
semtimedop(r1, &(0x7f0000000000)=[{0x3, 0x5}], 0x1, &(0x7f0000000080)={0x77359400})

19:34:15 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xfdfdffff00000000})

19:34:15 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]})

19:34:15 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x200000000000000})

19:34:15 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xffffffff00000000})

19:34:15 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x24e402, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000000c0))
rt_sigreturn()
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf, 0x1f, 0x2, 0x3}, 0xf)

19:34:15 executing program 0:
syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00')
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, 0x0)
socket$kcm(0x29, 0x400000000002, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x6800)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$RTC_PIE_OFF(r0, 0x7006)
prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/200)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000140000000500000004000000000000006eeb000097659b6caa0d6f5100000000003000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240), &(0x7f0000000280)=0x4)
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000200)=0x8)

19:34:15 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]})

19:34:15 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xa100000000000000})

19:34:15 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xa100})

19:34:15 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x300})

19:34:15 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]})

[ 2716.872304] binder: 5536:5542 transaction failed 29201/-28, size 7825960476700896110-1366232490 line 3035
19:34:15 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0)={0x100000001}, 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0)

19:34:15 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x3000000})

[ 2716.979531] binder: 5536:5542 ioctl c0306201 200001c0 returned -14
19:34:15 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xa1})

19:34:15 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]})

19:34:15 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xfffffdfd})

[ 2717.036674] binder_alloc: binder_alloc_mmap_handler: 5536 20001000-20004000 already mapped failed -16
[ 2717.115938] binder: BINDER_SET_CONTEXT_MGR already set
19:34:15 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]})

[ 2717.171371] binder: 5536:5537 ioctl 40046207 0 returned -16
19:34:15 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x30, r1, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x240000, 0x0)
ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000080))
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:15 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x4000})

19:34:15 executing program 3:
r0 = socket$packet(0x11, 0x0, 0x300)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000001c0)=0x3, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x10000, 0x0)
ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000080)=""/32)
ioctl$KDENABIO(r1, 0x4b36)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00')
ioctl$RTC_PIE_OFF(r2, 0x7006)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000180)=0x1)

19:34:15 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x300000000000000})

19:34:15 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x200000000000000})

19:34:16 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]})

19:34:16 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x40000000})

[ 2717.389972] binder: 5592:5595 transaction failed 29189/-22, size 0-0 line 2896
[ 2717.423640] binder: 5592:5595 ioctl c0306201 200001c0 returned -14
19:34:16 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x400000)
ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040))
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)

19:34:16 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x1000000})

19:34:16 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xa100})

19:34:16 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]})

19:34:16 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2000, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340407658c1a500effffff8000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:16 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x2000000})

19:34:16 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xa100000000000000})

[ 2717.666211] binder: 5617:5618 got transaction to invalid handle
[ 2717.674405] binder: 5617:5618 transaction failed 29201/-22, size 137439084544-137439100928 line 2896
[ 2717.685326] binder: 5617:5618 ioctl c0306201 200001c0 returned -14
19:34:16 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xfdfdffff})

[ 2717.729480] binder: BINDER_SET_CONTEXT_MGR already set
[ 2717.740108] binder: 5617:5624 ioctl 40046207 0 returned -16
19:34:16 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]})

19:34:16 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x100000})

19:34:16 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x300})

19:34:16 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x20200, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000000080)={0x5, 0xf7d3, 0xfffffffffffffeff, @empty, 'dummy0\x00'})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000ff0f00000000000000000000000000000000000000000000000049f83f4551f2", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2718.052435] binder_alloc: 5645: binder_alloc_buf size -985930702366638080 failed, no address space
[ 2718.067404] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 2718.094530] binder: 5645:5646 transaction failed 29201/-28, size 0--985930702366638080 line 3035
[ 2718.158945] binder: 5645:5646 ioctl c0306201 200001c0 returned -14
[ 2718.203311] binder: BINDER_SET_CONTEXT_MGR already set
[ 2718.224707] binder_alloc: 5645: binder_alloc_buf, no vma
[ 2718.239425] binder: 5645:5646 ioctl 40046207 0 returned -16
[ 2718.246274] binder: 5645:5653 transaction failed 29189/-3, size 0--985930702366638080 line 3035
[ 2718.285627] binder: 5645:5653 ioctl c0306201 200001c0 returned -14
19:34:17 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x80800)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080), 0x4)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x10000000}, 0x0, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6000, 0x0)
ioctl$VT_DISALLOCATE(r2, 0x5608)

19:34:17 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00b8ce9b44e49543180f439baf63404000000000000000000000000000000000000000000500000000005cf56b00000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:17 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xa1000000})

19:34:17 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})

19:34:17 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x4000})

19:34:17 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x2})

19:34:17 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x300})

[ 2718.680960] binder: 5655:5656 unknown command -1680951296
[ 2718.698944] binder: 5655:5656 ioctl c0306201 200001c0 returned -22
19:34:17 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x10})

19:34:17 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]})

[ 2718.732439] binder_alloc: binder_alloc_mmap_handler: 5655 20001000-20004000 already mapped failed -16
[ 2718.757754] binder: BINDER_SET_CONTEXT_MGR already set
19:34:17 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xfffffdfd})

[ 2718.801245] binder: 5655:5656 ioctl 40046207 0 returned -16
19:34:17 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634000000000000000ffffd97238d2bbd950ffff00000000000000000000000000000000400000000000006abe8fb0cd00", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:17 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x100000000000000})

[ 2719.030547] binder: 5692:5693 unknown command 4219648
[ 2719.064653] binder: 5692:5693 ioctl c0306201 200001c0 returned -22
[ 2719.092931] binder_alloc: binder_alloc_mmap_handler: 5692 20001000-20004000 already mapped failed -16
[ 2719.113400] binder: 5692:5698 unknown command 4219648
[ 2719.114508] binder: BINDER_SET_CONTEXT_MGR already set
[ 2719.118709] binder: 5692:5698 ioctl c0306201 200001c0 returned -22
[ 2719.124532] binder: 5692:5693 ioctl 40046207 0 returned -16
[ 2719.279405] net_ratelimit: 13 callbacks suppressed
[ 2719.279414] protocol 88fb is buggy, dev hsr_slave_0
[ 2719.289524] protocol 88fb is buggy, dev hsr_slave_1
19:34:18 executing program 3:
r0 = open$dir(&(0x7f00000006c0)='./file0\x00', 0x8000, 0x100)
name_to_handle_at(r0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x32, 0x81, "350728277640adb7a3209149a0bfccb2de304873d607f096ba78e5686ffbb2732ddec6a8eeae7d8238ea"}, &(0x7f0000000780), 0x1400)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x102)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000440)={<r3=>0x0, 0x6, 0x8d16, 0x1ff, 0x3, 0xffff, 0x100, 0xf29d, {0x0, @in6={{0xa, 0x4e21, 0xbebc, @local, 0xffffffff}}, 0x500, 0x6, 0xfff, 0x10001, 0x4}}, &(0x7f0000000500)=0xb0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000540)={r3, 0xf9, "3453edff710a9f1455431da320529e613b8518cd9938368f25e2612ef4970e7dc2ebe9bf99901dcac6f9e1049cda7e5683e60227512f68302798d9d803c58f56da8f779ebc4ac4345365ca284f0bd1306e15665b97de713f4d1ca9735b450236050b6b441b2ef67ea03dc0690df285b2444eb4a0e48c1f291544ad8becea1fa2e27c507afaddfed1d16af1cfa24326daa7b081459d2ee813a258ed7acfa760e383d304960b4be7ec3acb69ccd4138f07757d54c1fe13faf21d797e70810d12ba85a725cd97f74dba44cb2f08de33be8f7a99d94f471bd1ca028de06c666c21b4e1ac48d8522afd60addb91f1806a0211c28ab6f752ae1a4077"}, &(0x7f0000000680)=0x101)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req={0xb5, 0xffffffffffffffff, 0x7, 0x8}, 0x10)
r4 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)="dac6ebae4256c91d5220ed6f69497c374863d99b29193652131f06e47ca02e26a0f89435a584571e51d823370aa206c64b8064e4bfe3dd201452a23c1f3879bf8015523c64ce72622e58d1afd6424ce03fd7d896689cd3d38265890c7ae1924fabedc51809331e75c626820c6f83b79d0e5f71d9749f86bee9d607705e787a", 0x7f, 0x0)
r5 = syz_open_dev$audion(&(0x7f00000007c0)='/dev/audio#\x00', 0xc5, 0x10800)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000300)=0xe8)
lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0})
keyctl$chown(0x4, r4, r6, r8)
fchownat(r5, &(0x7f0000000800)='./file0\x00', r7, r8, 0x900)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47091adc}, 0x0, 0x0)

19:34:18 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xa100})

19:34:18 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xfdfdffff00000000})

19:34:18 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]})

19:34:18 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xa100000000000000})

19:34:18 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000005000000ffffffffffffffdf00000000080000000000000000000004", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:18 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]})

19:34:18 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x100000})

[ 2719.743921] binder: 5709:5711 transaction failed 29201/-28, size 34359738368-288230376151711744 line 3035
[ 2719.764216] binder: 5709:5711 ioctl c0306201 200001c0 returned -14
19:34:18 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x2})

19:34:18 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x200000000000000})

[ 2719.839484] binder_alloc: binder_alloc_mmap_handler: 5709 20001000-20004000 already mapped failed -16
19:34:18 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]})

[ 2719.897568] binder: BINDER_SET_CONTEXT_MGR already set
[ 2719.909558] binder: 5709:5711 ioctl 40046207 0 returned -16
[ 2719.923691] binder_alloc: 5709: binder_alloc_buf, no vma
19:34:18 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x1000000})

[ 2719.980212] binder: 5709:5729 transaction failed 29189/-3, size 34359738368-288230376151711744 line 3035
[ 2719.996207] binder: 5709:5729 ioctl c0306201 200001c0 returned -14
[ 2720.239371] protocol 88fb is buggy, dev hsr_slave_0
[ 2720.239420] protocol 88fb is buggy, dev hsr_slave_0
[ 2720.244506] protocol 88fb is buggy, dev hsr_slave_1
[ 2720.249558] protocol 88fb is buggy, dev hsr_slave_1
[ 2720.259695] protocol 88fb is buggy, dev hsr_slave_0
[ 2720.264898] protocol 88fb is buggy, dev hsr_slave_1
[ 2720.639378] protocol 88fb is buggy, dev hsr_slave_0
[ 2720.644500] protocol 88fb is buggy, dev hsr_slave_0
19:34:19 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]})

19:34:19 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:19 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x3})

19:34:19 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0)

19:34:19 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x2})

19:34:19 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x10000000000000})

[ 2720.875029] binder: 5751:5760 ioctl c0306201 200001c0 returned -14
[ 2720.887732] binder_alloc: binder_alloc_mmap_handler: 5751 20001000-20004000 already mapped failed -16
[ 2720.898032] binder: BINDER_SET_CONTEXT_MGR already set
[ 2720.912733] binder: 5751:5760 ioctl 40046207 0 returned -16
19:34:19 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x10000000000000})

19:34:19 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]})

19:34:19 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x3000000})

[ 2720.928843] binder_alloc: 5751: binder_alloc_buf, no vma
[ 2720.955182] binder: undelivered transaction 4431, process died.
[ 2720.964046] binder: 5751:5764 transaction failed 29189/-3, size 0-0 line 3035
19:34:19 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xa1})

[ 2721.006249] binder: 5751:5764 ioctl c0306201 200001c0 returned -14
19:34:19 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x8, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:19 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]})

19:34:19 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x1000000000000})

19:34:19 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xa100000000000000})

19:34:19 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x3})

[ 2721.217140] binder: 5786:5787 ioctl c0306201 200001c0 returned -14
[ 2721.284813] binder_alloc: binder_alloc_mmap_handler: 5786 20001000-20004000 already mapped failed -16
[ 2721.312079] binder: BINDER_SET_CONTEXT_MGR already set
[ 2721.371113] binder: 5786:5787 ioctl 40046207 0 returned -16
[ 2721.377008] binder: undelivered transaction 4434, process died.
[ 2721.407382] binder: 5786:5795 transaction failed 29189/-22, size 0-0 line 2896
[ 2721.417195] binder: 5786:5795 ioctl c0306201 200001c0 returned -14
19:34:20 executing program 3:
socket$packet(0x11, 0x2, 0x300)
r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000540))
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={<r2=>0xffffffffffffffff}, 0xb5286cfc96dae648, 0x8}}, 0xfffffffffffffd54)
ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000280)={0x6, 0x200, 0x8, 0x2, 0x7, 0x739})
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000180)=0x5, r2, 0x0, 0x0, 0x1}}, 0x20)
set_mempolicy(0x37bb61919cf538e9, &(0x7f00000002c0)=0xfffffffffffffffd, 0x869)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x91323a198f65f840)
syz_open_pts(r1, 0x800)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)
r3 = semget(0x3, 0x1, 0x41)
semctl$GETNCNT(r3, 0x0, 0xe, &(0x7f0000000000)=""/105)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000200)={0x6, 0x1, 0x7, 0x4, 0xd, 0x2, 0x20, 0x8, 0x8, 0x81})
ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f00000001c0)={0x10001, 0x101, 0x3, 0x1fe})

19:34:20 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]})

19:34:20 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x100000000000000})

19:34:20 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x10000000000000})

19:34:20 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x40000000})

19:34:20 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x802, 0x0)
fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000080))

19:34:20 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]})

[ 2721.910624] binder: 5813:5815 ioctl c0306201 200001c0 returned -14
[ 2721.921951] binder_alloc: binder_alloc_mmap_handler: 5813 20001000-20004000 already mapped failed -16
19:34:20 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x3})

19:34:20 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x3f000000})

[ 2721.973961] binder_alloc: 5813: binder_alloc_buf, no vma
[ 2722.004003] binder: BINDER_SET_CONTEXT_MGR already set
19:34:20 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x40000000})

[ 2722.032476] binder: 5813:5820 transaction failed 29189/-3, size 0-0 line 3035
19:34:20 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]})

[ 2722.087638] binder: 5813:5823 ioctl 40046207 0 returned -16
[ 2722.115259] binder: undelivered transaction 4437, process died.
[ 2722.128480] binder: 5813:5820 ioctl c0306201 200001c0 returned -14
19:34:20 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x1000000000000})

19:34:21 executing program 3:
clock_gettime(0x7, &(0x7f0000000000))
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x3, 0x0)
sendto(r1, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x144}, {&(0x7f00000000c0)=""/85, 0x630}, {&(0x7f0000000fc0)=""/4096, 0x24}, {&(0x7f0000000400)=""/120, 0x107c}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16ff}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x4000000000000f6, 0x6, &(0x7f0000003700)={0x77359400})
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x4)

19:34:21 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x300000000000000})

19:34:21 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xfdfdffff})

19:34:21 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:21 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]})

19:34:21 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xa1000000})

19:34:21 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xfffffdfd})

[ 2722.923586] binder: 5861:5862 ioctl c0306201 200001c0 returned -14
19:34:21 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x3000000})

[ 2722.964942] binder_alloc: binder_alloc_mmap_handler: 5861 20001000-20004000 already mapped failed -16
19:34:21 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]})

[ 2723.007984] binder: BINDER_SET_CONTEXT_MGR already set
19:34:21 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x1000000})

[ 2723.038314] binder: 5861:5862 ioctl 40046207 0 returned -16
19:34:21 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x300000000000000})

[ 2723.080216] binder: undelivered transaction 4440, process died.
19:34:21 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x84800)
ioctl$VIDIOC_G_AUDOUT(r3, 0x80345631, &(0x7f0000000080))
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x90, r5, 0x20d, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1400000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x167}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x20000045)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f00000000c0)={0x9}, 0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2723.248352] binder: 5891:5892 ioctl c0306201 200001c0 returned -14
[ 2723.287695] binder: BINDER_SET_CONTEXT_MGR already set
[ 2723.308640] binder: undelivered transaction 4442, process died.
[ 2723.315656] binder: 5891:5892 ioctl 40046207 0 returned -16
19:34:22 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pkey_alloc(0x0, 0x2)
socketpair(0x0, 0x8000a, 0x1000, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000040)={{0x87, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x2, 'nq\x00', 0x1, 0x0, 0x74}, {@empty, 0x4e20, 0x0, 0xf3c3, 0xffffffffffff0001, 0x9}}, 0x44)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)

19:34:22 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]})

19:34:22 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xa1000000})

19:34:22 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x2000000})

19:34:22 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x4000000000000000})

19:34:22 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})
select(0x40, &(0x7f0000000040)={0x3, 0x4, 0x7fffffff, 0x16, 0x7f, 0xfffffffffffffff7, 0xd823, 0x7fffffff}, &(0x7f0000000080)={0x456, 0x7, 0x8b3, 0x4, 0x7, 0xfff, 0x80, 0x8}, &(0x7f00000000c0)={0x400, 0x7, 0x87d, 0x3ff, 0x8, 0x401, 0x80000000, 0xffffffff}, &(0x7f0000000100)={0x0, 0x7530})

[ 2723.960081] binder: BINDER_SET_CONTEXT_MGR already set
[ 2723.965623] binder: 5908:5909 ioctl 40046207 0 returned -16
[ 2723.973233] binder: 5908:5909 got transaction to context manager from process owning it
[ 2723.982175] binder: 5908:5909 transaction failed 29201/-22, size 0-0 line 2887
19:34:22 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]})

19:34:22 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x10})

[ 2724.005143] binder: 5908:5909 ioctl c0306201 200001c0 returned -14
19:34:22 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x2000000})

[ 2724.050710] binder_alloc: binder_alloc_mmap_handler: 5908 20001000-20004000 already mapped failed -16
[ 2724.084463] binder: BINDER_SET_CONTEXT_MGR already set
19:34:22 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x3000000})

[ 2724.118148] binder: 5908:5909 ioctl 40046207 0 returned -16
[ 2724.145157] binder: BINDER_SET_CONTEXT_MGR already set
[ 2724.160087] binder: 5908:5927 ioctl 40046207 0 returned -16
19:34:22 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x4000})

19:34:22 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})

[ 2724.187876] binder_alloc: 5908: binder_alloc_buf, no vma
[ 2724.207469] binder: 5908:5909 transaction failed 29189/-3, size 0-0 line 3035
[ 2724.235298] binder: 5908:5909 ioctl c0306201 200001c0 returned -14
[ 2724.399404] net_ratelimit: 14 callbacks suppressed
[ 2724.399413] protocol 88fb is buggy, dev hsr_slave_0
[ 2724.409410] protocol 88fb is buggy, dev hsr_slave_0
[ 2724.409466] protocol 88fb is buggy, dev hsr_slave_1
[ 2724.409545] protocol 88fb is buggy, dev hsr_slave_0
[ 2724.414562] protocol 88fb is buggy, dev hsr_slave_1
[ 2724.419654] protocol 88fb is buggy, dev hsr_slave_1
19:34:23 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00')
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x6c, 0x3ff, 0x8})
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000380)={<r2=>0x0, @in6={{0xa, 0x4e22, 0x1, @remote, 0x9}}}, &(0x7f0000000440)=0x84)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000b80)={<r3=>0x0, 0x1ff}, &(0x7f0000000bc0)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000c00)={<r4=>0x0, 0xffffffff00000001}, &(0x7f0000000c40)=0x8)
sendmmsg$inet_sctp(r0, &(0x7f0000000e80)=[{&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x4, @mcast1, 0x4}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000180)="8d4844c3facab83073c39fb015d0cb9cfa480c7f0e0dc643ac62944e5e3216807c9ff1447920b8d7aafda8743d90e93c51f3a9234f737e9dd2fafff41d919031cf0324410a96ba5eea0de4c5ba02113e47bad004cfd744a9e214d54a070b9927892550c2c553641deaa0027ede6c4468ead0e8d85a5f5a9c81b68ec2d826a79d77190fbc2abf055c0b5940cc2525db", 0x8f}, {&(0x7f0000000240)="9f42252a3f7beee3c877d72b3dd56127b4a61082502ead6a4ec375ecbaccc293edeb837e0ef76bfe448c22ea3abe2a93024e8f242e64cb70d92fd7e713c8d3df0dacc29785315a7cc0625c7fcc0ab8bede6036380de68c62d3c92260b9d43017093ac8cdfd5cd47bae82992c0359c48d2797e5e615e5c96484faefba7f7879edf692f49088b35b7ca75e5d09c7cf2896bdc9dbd2c988f917d7b778e8829b67b7068af7e0d3bc3698bee6d26bf4eebad6", 0xb0}, {&(0x7f0000000300)="056f4cc1516d65fa14e929891042c1ef8f6c9c4fb1ba74851c0effcee17800539d01307fb132418622f1a0583e", 0x2d}], 0x3, &(0x7f0000000480)=[@init={0x18, 0x84, 0x0, {0x1f, 0x3ff, 0x9}}, @init={0x18, 0x84, 0x0, {0x9, 0x7, 0x200, 0x92eb}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x21}}, @authinfo={0x18, 0x84, 0x6, {0x100000000}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0xd06}, @authinfo={0x18, 0x84, 0x6, {0x80000001}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x4, 0x2, 0x1, 0x1, 0x6, 0x7, 0xe000000000000000, r2}}], 0xe0, 0x4010}, {&(0x7f0000000580)=@in6={0xa, 0x4e22, 0x400, @dev={0xfe, 0x80, [], 0xb}, 0x3}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000005c0)="d1ca5b1bee1211fa3abc1a973b3dfa8f51365f1fe81a06c15f1be00bd6cf6e13ea6576172db4cda47772cdd43c8ba7bfe060ee62cf4451b80848db61870d1ae1ad9214ff91749ca36d404983ce0ecd02fef865ac080abc6aeea298e42e9a5bfe869e9f1225027eaf3fea1dc888e1ca21037cbeffe178afcabcb1589c22e5ac53007b02bbae00948b45d2befabd578d1e37468100c6a55e42233751ca36b6b517d8b85b14c93824936a8a1857e8c6ff24293b8eeb6e30d9d25039", 0xba}, {&(0x7f0000000680)="c117ae634a8eda122ff3be251a918e4335346316ec8a324e416da82c57d5b8a3851ac86a7e5d4c5a50c61c1fb0fc67242f9e176f664cfdda2bb8e66e406bfca44ace70f89989004f9a466298562286a78f7d2b46339d243e4ecbe52a52c5545f083b5763cde5e2b8141e5f85ed4278f0bde553dd4eea7006e834451e656860c8cd145a1b5c084dbfd90b20e19f05a43c59d7a2dac469cc7879f6380a2547d37aafe28a3997b64c7f74ffab25c50f4912340aa8bfd80b050c3aeba7384f2ddfb7184e6671b536", 0xc6}, {&(0x7f0000000780)="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", 0xfe}, {&(0x7f0000000880)="631906236a6b5ed82fc760170676d5b790f673ffb16609a1946fe8b03fb8de7360752c06f4badeebaa80421c19068f5f30b0cac946110395f1f75708e6ce7ff7e7f6aab9904530cde2eabd62447d38c36282b383aefe85c4e0fadd8f9f8568012f72eb58ceed4362b92064979a68ab6b9d0b62e869e2c936b4d4f0d139a8ede4aec13f1058c8611177bdf3781d88d42935795b0da7c4eb85237fc435e6bcaaf78452d00fcd0a9f3f0decf3e85b3344c1e4e6a3b015527af97139cd70609c353428ec5406a87d87bad04213a82d58cd0af1d60e69eb67777763cbaeba9fbd", 0xde}, {&(0x7f0000000980)="fa878eb7ec92ae5bdc0a5a1ea6aa6e9e83ba7a1c8b4dcca201a67a6fb385e4bb4c097ec1a4ffd32542f8a6f621ee1ffcc88267ec377fb8f38bcfaed7df82f6982ffc183c0b3dac7c59d8b429b9af177e85", 0x51}, {&(0x7f0000000a00)="a39d682441378e9b8e053a85f5bf14db7b1bac55c9035d1520ba272f36238a71a894973e9820efe74305e65c00ad0b736ee5629891a921d16f779de4b2999769b798cc3f2931606a8faab99d8222da90004d23eeab95bcd38150f9719fc9a37703a7cf10da20f801172ea5841d0574e717a46960f77049095ca74a24e26465c5", 0x80}, {&(0x7f0000000a80)="22a5c0b63683ae18d20319d0c4342e978f2ea93d3ab1e06c5ae15b566894cb091f5df16aa3843d0e5b8eb7113dc127acadbfa03b71d81c47b8d2845df993e4921611e9fd32375e393c96f687da4d93083cc607f2e987bcc13d5ad056676405da9ad09526bc1aa484c26a0f9e10f3a2b1ddaddcf376ef98255b", 0x79}], 0x7, &(0x7f0000000c80)=[@authinfo={0x18, 0x84, 0x6, {0x800}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @authinfo={0x18, 0x84, 0x6, {0x5e7}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x2, 0x7, 0x3, r3}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @authinfo={0x18, 0x84, 0x6, {0x1f}}, @init={0x18, 0x84, 0x0, {0x8c7, 0x2, 0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x3, 0x400, r4}}], 0xf0, 0x4}, {&(0x7f0000000d80)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000dc0)="99863c5a1ee2ef4c2335eb83b38e6ae36b7fffe2e528968e2e99f2b31fc9a642c613d60ff378ad7288b79c5ed629474a2c72f486f81bd0a09a88e1516898d3f27e09fa443076", 0x46}], 0x1, 0x0, 0x0, 0x40000}], 0x3, 0x4040000)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x1000}, 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)

19:34:23 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xa1000000})

19:34:23 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xd77, 0x80)
ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x2, 0x6, 0x6ee8965b, 0x404})
ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f0000000200)={{0x0, @addr=0x5}, 0x8, 0x0, 0x100000000})
setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "78c5ee85d6980665f11dd25f4e4c0014"}, 0x11, 0x1)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=<r4=>0x0)
ptrace$peekuser(0x3, r4, 0x42)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:23 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xffffff7f})

19:34:23 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]})

19:34:23 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xa100})

19:34:23 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xa100000000000000})

19:34:23 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]})

[ 2724.988414] binder: 5955:5956 transaction failed 29189/-22, size 0-0 line 2896
[ 2725.017988] binder: 5955:5956 ioctl c0306201 200001c0 returned -14
19:34:23 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x4000000000000000})

19:34:23 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xa1})

[ 2725.078986] binder: 5955:5966 transaction failed 29189/-22, size 0-0 line 2896
19:34:23 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]})

[ 2725.128024] binder: 5955:5966 ioctl c0306201 200001c0 returned -14
19:34:23 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xfffffdfd})

[ 2725.519411] protocol 88fb is buggy, dev hsr_slave_0
[ 2725.524509] protocol 88fb is buggy, dev hsr_slave_1
19:34:24 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20000, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
write$FUSE_LSEEK(r1, &(0x7f00000001c0)={0x18, 0x0, 0x7, {0x2}}, 0x18)
ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0x3, 0x4, 0x7ff})
getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000180)=0x1e)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)

19:34:24 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000000000000df676ec40b6644ac32c7000000000500000000000000000000000000000000000000000000001b000000", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:24 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x300000000000000})

19:34:24 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]})

19:34:24 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xfdfdffff00000000})

19:34:24 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xa100000000000000})

19:34:24 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]})

[ 2726.063617] binder: 6000:6005 ioctl c0306201 200001c0 returned -14
[ 2726.074355] binder_alloc: binder_alloc_mmap_handler: 6000 20001000-20004000 already mapped failed -16
[ 2726.084560] binder: BINDER_SET_CONTEXT_MGR already set
[ 2726.092707] binder: 6000:6005 ioctl 40046207 0 returned -16
[ 2726.094975] binder_alloc: 6000: binder_alloc_buf, no vma
[ 2726.116643] binder: 6000:6008 transaction failed 29189/-3, size 0-0 line 3035
[ 2726.131217] binder: send failed reply for transaction 4449 to 6000:6005
[ 2726.147856] binder: undelivered TRANSACTION_ERROR: 29189
19:34:24 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x3f00000000000000})

19:34:24 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x4000000000000000})

[ 2726.174543] binder: 6000:6008 ioctl c0306201 200001c0 returned -14
19:34:24 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xffffffff00000000})

19:34:24 executing program 0:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x6d44dc16872d122e, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000180)=0x9, 0x4)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0x1, 0x4)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000380)="0a1f024f5b4193a7aceecc9ebe6e4b270020dece868fb8100ea4590463d6bf45761ef803b84ec3fe4d04162a5063c3406793cb9cbc01ddd974fb753db412e46616c93850ca21f7ff43806e6ebe91fc10106e92cae55f9b3878bc3497af5231edc6a4f92dfa9b11e26961945cab2d345f5886e3b6a8deb0e8ac16240b61000000000000000000000000")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xdc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340400000000000002633925188a85e6ae9d80f52f1650000000000000000000000000000000000000000000000000000000064412987650d2021717417f22189cdc0fefde5a17216cfab03a420c8b93bcdc3356756429c6728911541ef54f9d03aa9229cc8499a5b066519ba94892f097a8fdb386f50a803ba2213855b5c03e9a5a1bd11b5836fa0de67465274a01fc6b3c4d07f2fcf282dd674d0b75a890c4855a7012f279bde3edda92bfaf7149912e86188d7212539acd610606382ad4e32aa09007a337509896b4bbbc8", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x99, 0x20000240, &(0x7f00000000c0)="e3b1199d8dd8c9ec86c1f8a627023f1f52eed4bc84622d617a25e9f1964a83af5a1de7124b099e79f8ea5e2fd0b1164ca7656abf641198beb157117a0aa82efb2467bae59b38dcff4485241e1d0261d75e8b63e5713c19008a8e995bd37ac7"})

19:34:24 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]})

[ 2726.363049] binder: 6024:6029 unknown command -1578762754
[ 2726.387529] binder: 6024:6029 ioctl c0306201 20000140 returned -22
[ 2726.437866] binder: BINDER_SET_CONTEXT_MGR already set
[ 2726.465632] binder: 6024:6033 ioctl 40046207 0 returned -16
[ 2726.472219] binder_alloc: binder_alloc_mmap_handler: 6024 20001000-20004000 already mapped failed -16
[ 2726.477162] binder: release 6024:6029 transaction 4452 out, still active
[ 2726.481765] protocol 88fb is buggy, dev hsr_slave_0
[ 2726.481794] protocol 88fb is buggy, dev hsr_slave_0
[ 2726.507642] binder: undelivered TRANSACTION_COMPLETE
[ 2726.513236] binder: send failed reply for transaction 4452, target dead
19:34:25 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x40000000000000, 0x0, 0x200}, 0x0, &(0x7f0000000140)={0x4, 0x8, 0x0, 0x0, 0x7, 0x8}, 0x0, 0x0)
socket$packet(0x11, 0x6, 0x300)

19:34:25 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]})

19:34:25 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xa100})

19:34:25 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xffffffff00000000})

19:34:25 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x10000000000000})

19:34:25 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:25 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]})

[ 2727.156024] binder: 6048:6050 unknown command 696148736
[ 2727.164219] binder: 6048:6050 ioctl c0306201 200001c0 returned -22
[ 2727.177767] binder_alloc: binder_alloc_mmap_handler: 6048 20001000-20004000 already mapped failed -16
[ 2727.195984] binder: BINDER_SET_CONTEXT_MGR already set
19:34:25 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x300})

19:34:25 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xa1000000})

[ 2727.223370] binder: 6048:6050 ioctl 40046207 0 returned -16
[ 2727.236912] binder: 6048:6054 unknown command 696148736
[ 2727.253180] binder: 6048:6054 ioctl c0306201 200001c0 returned -22
19:34:25 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x100000000000000})

19:34:26 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
prctl$PR_SET_UNALIGN(0x6, 0x2)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:26 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]})

[ 2727.421226] binder: 6071:6073 ioctl c0306201 200001c0 returned -14
[ 2727.462804] binder_alloc: binder_alloc_mmap_handler: 6071 20001000-20004000 already mapped failed -16
[ 2727.515604] binder: BINDER_SET_CONTEXT_MGR already set
[ 2727.515622] binder: 6071:6073 ioctl 40046207 0 returned -16
[ 2727.547489] binder: undelivered transaction 4455, process died.
19:34:26 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0xfffffffffffffe97, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0)

19:34:26 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x10})

19:34:26 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xfffffdfd})

19:34:26 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]})

19:34:26 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x100000})

19:34:26 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000040)=0xffffffff)
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2728.181806] binder: 6087:6088 ioctl c0306201 200001c0 returned -14
[ 2728.218320] binder_alloc: binder_alloc_mmap_handler: 6087 20001000-20004000 already mapped failed -16
19:34:26 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]})

[ 2728.231553] binder: BINDER_SET_CONTEXT_MGR already set
[ 2728.237403] binder: 6087:6097 ioctl 40046207 0 returned -16
[ 2728.245255] binder: undelivered transaction 4457, process died.
19:34:26 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xa1})

19:34:26 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x100000000000000})

19:34:27 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]})

19:34:27 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xfffffdfd})

19:34:27 executing program 0:
r0 = memfd_create(&(0x7f0000000040)='/dev/binder#\x00', 0x3)
write(r0, &(0x7f0000000c00)="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", 0x1000)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(0x0, 0x0, 0xffffffffffffffff)
write$binfmt_elf32(r2, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x100, 0x8, 0x3, 0x5, 0xeb, 0x2, 0x6, 0x3, 0x176, 0x38, 0x345, 0x800, 0x4, 0x20, 0x1, 0x8, 0x80000001, 0xa00}, [{0x2, 0x6f, 0x200, 0x3, 0xcc4, 0x0, 0x800, 0x7}], "e894c91f306bebe4", [[], [], [], [], [], [], [], []]}, 0x860)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:27 executing program 3:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)={0x5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}]})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000240))
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000440)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000340)={0x1, [0x3ff, 0x1, 0x100000001, 0x10001, 0x0, 0x6, 0x7fffffff, 0x2ed2, 0x8, 0x0, 0xfffffffffffffffa, 0x100, 0x2, 0x1f5, 0x3, 0x9, 0x10001, 0x80, 0x2, 0x5, 0x7, 0x7, 0x1, 0x9, 0xffffffffffffffff, 0x695, 0x3f, 0x80000000, 0x2, 0x5, 0x6, 0x0, 0x1, 0x7fff, 0x7, 0x8, 0x10001, 0x40, 0x7f, 0x6, 0x3, 0x3, 0x67f, 0x0, 0x823, 0x2, 0x9, 0x400], 0x21b8ced4ec62c986})
pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20000000000000, 0x8000000000, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x6)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000003c0)={0xd9, 0x100000000, 0xd06, 0x7f, 0x0, 0x2d1})

19:34:27 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x4000000000000000})

[ 2728.472542] binder: 6115:6120 transaction failed 29189/-22, size 0-0 line 2896
19:34:27 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]})

19:34:27 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xffffff7f00000000})

19:34:27 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x10000000000000})

[ 2728.528828] binder: 6115:6120 ioctl c0306201 200001c0 returned -14
19:34:27 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x2)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x20014, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x1)
ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000080)=0x2)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:27 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xfdfdffff00000000})

19:34:27 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]})

19:34:27 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xfdfdffff})

19:34:27 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xa1000000})

[ 2728.735124] binder_alloc: 6143: binder_alloc_buf, no vma
19:34:27 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]})

[ 2728.785525] binder: 6143:6145 transaction failed 29189/-3, size 0-0 line 3035
[ 2728.816280] binder: 6143:6145 ioctl c0306201 200001c0 returned -14
19:34:27 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x300000000000000})

[ 2728.882528] binder: BINDER_SET_CONTEXT_MGR already set
[ 2728.935252] binder: 6143:6145 ioctl 40046207 0 returned -16
[ 2728.935297] binder_alloc: 6143: binder_alloc_buf, no vma
[ 2728.988489] binder: 6143:6166 transaction failed 29189/-3, size 0-0 line 3035
[ 2729.029531] binder: 6143:6166 ioctl c0306201 200001c0 returned -14
19:34:28 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x1, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000180)={0x980000, 0xffff, 0xc262, [], &(0x7f0000000080)={0x990b6f, 0xe18, [], @string=&(0x7f0000000040)=0x2}})
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)

19:34:28 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x200000000000000})

19:34:28 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]})

19:34:28 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x300})

19:34:28 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x100000})

19:34:28 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
fchdir(r0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

[ 2729.598290] binder: 6184:6186 ioctl c0306201 200001c0 returned -14
[ 2729.627938] binder_alloc: binder_alloc_mmap_handler: 6184 20001000-20004000 already mapped failed -16
19:34:28 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]})

19:34:28 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x4000})

19:34:28 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xffffffff00000000})

[ 2729.646642] binder: BINDER_SET_CONTEXT_MGR already set
19:34:28 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x10})

[ 2729.679373] net_ratelimit: 18 callbacks suppressed
[ 2729.679382] protocol 88fb is buggy, dev hsr_slave_0
[ 2729.685748] binder: 6184:6192 ioctl 40046207 0 returned -16
[ 2729.689498] protocol 88fb is buggy, dev hsr_slave_1
[ 2729.716367] binder: undelivered transaction 4463, process died.
19:34:28 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]})

19:34:28 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x8040, 0x0)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000004040000000000000100000000007d8279a6c36cd26065df3aeb0b120530", @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0xf1, 0x20000240, &(0x7f00000003c0)})
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x100, 0x0)
fsetxattr$security_selinux(r3, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:apt_var_log_t:s0\x00', 0x23, 0x3)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="2f70696473202b637075202d63707520e7a1d823453f519c748654010987cd75e0ff3906857f38c6cb15c4494e9dca915aa27f7bbc4525d4e858207736fac7698fb210e1bbff7f253e4791494e75cf69cb3e0d99e00bce3b351db66ce81170e60b5147da58484e4be7c92168095d67036e2c236d109903437684b0ee82f7f8c5c1c70f7d54cfb6ff312ad8fb208a25be541f1f8cb2a3cc097d8442bbe8a5bc9e02d82daffac991e18a964294cd13d2397554ec85984874661929d9e2df8995dd6f243cc5eb10823865857fc75c932ff5d5f105eb62db9b"], 0x10)

[ 2729.859257] binder_alloc: 6210: binder_alloc_buf size 67436544 failed, no address space
[ 2729.893352] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 2729.920518] binder: 6210:6211 transaction failed 29201/-28, size 67371008-65536 line 3035
[ 2729.957000] binder: 6210:6211 ioctl c0306201 200001c0 returned -14
[ 2729.986374] binder_alloc: binder_alloc_mmap_handler: 6210 20001000-20004000 already mapped failed -16
[ 2729.997781] binder: BINDER_SET_CONTEXT_MGR already set
[ 2730.003361] binder: 6210:6211 ioctl 40046207 0 returned -16
[ 2730.005743] binder_alloc: 6210: binder_alloc_buf, no vma
[ 2730.015372] binder: 6210:6216 transaction failed 29189/-3, size 67371008-65536 line 3035
[ 2730.024238] binder: 6210:6216 ioctl c0306201 200001c0 returned -14
19:34:29 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x400000, 0x0)
ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000200))
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x111200, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x305000)
renameat(r2, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000180)='./file0\x00')

19:34:29 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x2})

19:34:29 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x40000000})

19:34:29 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x2})

19:34:29 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]})

19:34:29 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x20000240, &(0x7f00000003c0)})

19:34:29 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]})

[ 2730.686486] binder_alloc: binder_alloc_mmap_handler: 6226 20001000-20004000 already mapped failed -16
[ 2730.696363] binder: BINDER_SET_CONTEXT_MGR already set
[ 2730.709867] binder: 6226:6227 ioctl 40046207 0 returned -16
19:34:29 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x101, 0x0)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={<r4=>0x0, 0x51, "d8ebb4499a40a7c7634bdc7c6c5bda25212231cd6f7525c9a74a79dee10e25713a44812729ad8098f5a1069fdb7ef9332e10bd5088b7e1702ed26a3301fa5ba9a14d7443bba87c3c383106e334af416ffe"}, &(0x7f0000000100)=0x59)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x8, 0x81, 0x200, 0x9, 0x1, 0x7, 0x401, 0x7, r4}, &(0x7f0000000180)=0x20)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})
sysfs$3(0x3)

19:34:29 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x3})

19:34:29 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x3f00})

19:34:29 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]})

19:34:29 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xa100000000000000})

[ 2730.880801] binder: 6245:6247 ioctl c0306201 200001c0 returned -14
[ 2730.932564] binder: BINDER_SET_CONTEXT_MGR already set
[ 2730.971596] binder: 6245:6256 ioctl 40046207 0 returned -16
[ 2730.988273] binder_alloc: 6245: binder_alloc_buf, no vma
[ 2731.003390] binder: undelivered transaction 4469, process died.
[ 2731.014954] binder: 6245:6247 transaction failed 29189/-3, size 0-0 line 3035
[ 2731.028318] binder: 6245:6247 ioctl c0306201 200001c0 returned -14
[ 2731.039403] protocol 88fb is buggy, dev hsr_slave_0
[ 2731.044543] protocol 88fb is buggy, dev hsr_slave_1
[ 2731.049709] protocol 88fb is buggy, dev hsr_slave_0
19:34:30 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0xffffffffffffff0a, &(0x7f0000000040)={0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000000000000}, 0x0, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x66a5)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080))

19:34:30 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x1000000000000})

19:34:30 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})

19:34:30 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x1000000000000})

19:34:30 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x7, 0x401, 0xc3e5})
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})
getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2)
setsockopt$inet6_dccp_buf(r3, 0x21, 0xc0, &(0x7f00000000c0)="7dc4063b68564bb0fb39f4de506f4878f132234e53657a759ffb4355345b6dc40d6204b0403f4ba331f608e603a265920d7157c1ab8d297ba21eab3b12dc997d96862facffff4a809cb0e0d4fe6418e6c45ef0ce3bdcbe17d1ec72a8b625cb8b3665dc0069bb16bd30935796d15ad27c647b01cb2df6d932c44bb635afeccb6b2787ff9ea02c5c630c5d61baa7b4c8c07fee58ac99524cd626190e329218d9c0bcff21f098c4c5ab308d7a97ab859655d0eda88fa54916602fe8b6250983114fc65ec5fe886a652cd357c92c723297dac708efdbfd0f60b9f2fc57a38058e690d8e850", 0xe3)

19:34:30 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x4000})

[ 2731.757808] binder: 6268:6278 ioctl c0306201 200001c0 returned -14
19:34:30 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x300000000000000})

19:34:30 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})

19:34:30 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x10})

19:34:30 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x2000000})

[ 2731.805218] binder_alloc: binder_alloc_mmap_handler: 6268 20001000-20004000 already mapped failed -16
[ 2731.806083] binder: BINDER_SET_CONTEXT_MGR already set
[ 2731.838336] binder: 6268:6284 ioctl 40046207 0 returned -16
[ 2731.911185] binder: undelivered transaction 4472, process died.
19:34:30 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x1000000})

19:34:30 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x20800, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000100)={@sco={0x1f, {0x3, 0x6, 0x0, 0x5, 0x8000, 0x8}}, {&(0x7f0000000080)}, &(0x7f00000000c0), 0x1}, 0xa0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:30 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup2(r0, r0)
ioctl$VT_RELDISP(r1, 0x5605)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)

19:34:30 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})

19:34:30 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xa1000000})

19:34:30 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x40000000})

19:34:30 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x2000000})

[ 2732.126036] binder: 6309:6310 ioctl c0306201 200001c0 returned -14
[ 2732.149469] binder_alloc: binder_alloc_mmap_handler: 6309 20001000-20004000 already mapped failed -16
19:34:30 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]})

19:34:30 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xfdfdffff})

[ 2732.240531] binder: BINDER_SET_CONTEXT_MGR already set
[ 2732.245883] binder: 6309:6318 ioctl 40046207 0 returned -16
[ 2732.248276] binder_alloc: 6309: binder_alloc_buf, no vma
19:34:30 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x10})

19:34:31 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x4000})

[ 2732.295597] binder: 6309:6330 transaction failed 29189/-3, size 0-0 line 3035
[ 2732.319219] binder: undelivered transaction 4474, process died.
19:34:31 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]})

[ 2732.368947] binder: 6309:6330 ioctl c0306201 200001c0 returned -14
19:34:31 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40a000, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0xf1, 0x20000240, &(0x7f00000003c0)})

19:34:31 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xa100})

[ 2732.513678] binder: 6347:6350 ioctl c0306201 200001c0 returned -14
[ 2732.558457] binder_alloc: binder_alloc_mmap_handler: 6347 20001000-20004000 already mapped failed -16
[ 2732.581304] binder: BINDER_SET_CONTEXT_MGR already set
[ 2732.605851] binder: 6347:6357 ioctl 40046207 0 returned -16
[ 2732.605930] binder_alloc: 6347: binder_alloc_buf, no vma
[ 2732.618865] binder: 6347:6350 transaction failed 29189/-3, size 0-0 line 3035
[ 2732.627327] binder: 6347:6350 ioctl c0306201 200001c0 returned -14
[ 2732.635028] binder: undelivered transaction 4477, process died.
[ 2732.719414] protocol 88fb is buggy, dev hsr_slave_0
[ 2732.719429] protocol 88fb is buggy, dev hsr_slave_0
[ 2732.724551] protocol 88fb is buggy, dev hsr_slave_1
[ 2732.729605] protocol 88fb is buggy, dev hsr_slave_1
[ 2732.739993] protocol 88fb is buggy, dev hsr_slave_0
19:34:31 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)

19:34:31 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x3f00000000000000})

19:34:31 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x3})

19:34:31 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]})

19:34:31 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x100000000000000})

19:34:31 executing program 0:

19:34:31 executing program 0:

19:34:31 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]})

19:34:31 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x200000000000000})

19:34:31 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xfdfdffff})

19:34:31 executing program 0:
r0 = accept(0xffffffffffffff9c, &(0x7f00000000c0)=@l2, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00')
preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

19:34:32 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x100000000000000})

19:34:32 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
r1 = socket$packet(0x11, 0x3, 0x300)
getitimer(0x2, &(0x7f0000000040))
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)

19:34:32 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]})

19:34:32 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x1000000})

19:34:32 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x3f000000})

19:34:32 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4)
fcntl$setstatus(r1, 0x4, 0x2003)
sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0)

19:34:32 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x4000000000000000})

19:34:32 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

19:34:32 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x3000000})

19:34:33 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x300000000000000})

19:34:33 executing program 0:
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000})
read(r0, &(0x7f0000000100)=""/67, 0x43)
flock(r0, 0x2)
mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0)
flock(r0, 0x2)
flock(r0, 0x2)
syz_emit_ethernet(0x1a, &(0x7f0000000240), 0x0)

19:34:33 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x40000000})

19:34:33 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]})

[ 2734.799377] net_ratelimit: 3 callbacks suppressed
[ 2734.799386] protocol 88fb is buggy, dev hsr_slave_0
[ 2734.799443] protocol 88fb is buggy, dev hsr_slave_0
[ 2734.804349] protocol 88fb is buggy, dev hsr_slave_1
[ 2734.809434] protocol 88fb is buggy, dev hsr_slave_1
[ 2734.824505] protocol 88fb is buggy, dev hsr_slave_0
[ 2734.829625] protocol 88fb is buggy, dev hsr_slave_1
19:34:33 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xff, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000180)={<r2=>0x0, 0x67, "ecd8e5ef46452f6560960f313fd84e60d69ac861ba6efb7f2d92eca3d7415ea64fab5aaac36289b11c5c4cb43713a70dc05ca417a1bdd6572c0dd0cddeb3021235fc1f80ed5af1e1f545e2f78feff201363935c59184aed228c7d47f1eae98d8f533d97bce8aaa"}, &(0x7f0000000200)=0x6f)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r2, 0x6}, 0x8)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)
r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x100)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f0000000040))

19:34:33 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x300})

19:34:33 executing program 0:
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)}, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
close(0xffffffffffffffff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, 0x0, 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x9d, 0x0, &(0x7f0000000300)=""/157}, 0x28)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x101200, 0x0)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000000)=r1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x50, &(0x7f0000000040)}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000000000006a0a00fe00000000850000000a000000b7000000000000009500000000000000"], 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0x10, 0x0, &(0x7f0000000480)="89ef4aa8b744896f9a5626a8f635ce70", 0x0, 0x8000}, 0x28)

19:34:33 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x100000})

19:34:33 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]})

19:34:33 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x10000000000000})

19:34:34 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xa100})

19:34:34 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]})

19:34:34 executing program 0:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x300000000000000})

19:34:34 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xffffffff00000000})

19:34:34 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x200000000000000})

19:34:34 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})

[ 2735.919378] protocol 88fb is buggy, dev hsr_slave_0
[ 2735.924476] protocol 88fb is buggy, dev hsr_slave_1
19:34:34 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)
readv(r0, &(0x7f0000001240)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000000000)=""/171, 0xab}, {&(0x7f0000001180)=""/151, 0x97}], 0x3)

19:34:34 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xa1})

19:34:34 executing program 0:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x300000000000000})

19:34:34 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x1000000000000})

19:34:34 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xffffff7f00000000})

19:34:34 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]})

19:34:35 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]})

19:34:35 executing program 0:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xfdfdffff})

19:34:35 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x4000000000000000})

19:34:35 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x1000000})

19:34:35 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xffffffff00000000})

19:34:35 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]})

[ 2736.879420] protocol 88fb is buggy, dev hsr_slave_0
[ 2736.879782] protocol 88fb is buggy, dev hsr_slave_0
19:34:35 executing program 3:
r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3ff, 0xb2000)
ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0x400, "da427b5e10d7a991136d9d9995f867b3c11b8356ae213201d8da188f01f17cfd", 0x2, 0x100, 0xfff, 0x4c, 0xa, 0x3, 0x4, 0x100000000})
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000180)={0x0, 0x0, {0x40, 0x80000001, 0x2002, 0x7, 0xb, 0x4, 0x2, 0x2}})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)

19:34:35 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x200000000000000})

19:34:35 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x2000000})

19:34:35 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})

19:34:35 executing program 0:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0xffffff7f00000000})

19:34:35 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xfffffdfd})

19:34:36 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]})

19:34:36 executing program 0:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x3000000})

19:34:36 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x40000000})

19:34:36 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xfdfdffff00000000})

19:34:36 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xa100000000000000})

19:34:36 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]})

19:34:36 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40000, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000280)={<r2=>0x0, 0xcc, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x3, @ipv4={[], [], @multicast2}, 0xc0d}, @in6={0xa, 0x4e20, 0xefc, @mcast1, 0xfffffffffffffffe}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x6}, @in={0x2, 0x3ff, @broadcast}, @in6={0xa, 0x4e21, 0x5a5, @dev={0xfe, 0x80, [], 0x25}, 0x40}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0xe3, @initdev={0xfe, 0x88, [], 0x3, 0x0}, 0x200}, @in={0x2, 0x4e20, @local}]}, &(0x7f00000002c0)=0x10)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={r2, 0xffffffffffffffe0}, 0x8)
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000040), 0x4)

19:34:36 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]})

19:34:36 executing program 0:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xfffffdfd})

19:34:36 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x3000000})

19:34:36 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x4000})

19:34:36 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x2000000})

19:34:37 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]})

19:34:37 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x10})

19:34:37 executing program 0:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xa100000000000000})

19:34:37 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xfdfdffff})

19:34:37 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x40000000})

19:34:37 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

19:34:37 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req={0x9, 0x401, 0x6, 0x6}, 0x10)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)

19:34:37 executing program 0:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x300000000000000})

19:34:37 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xa1})

19:34:37 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xa100})

19:34:37 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xa100000000000000})

19:34:37 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]})

19:34:38 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x1000000})

19:34:38 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x1000000000000})

19:34:38 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]})

19:34:38 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x4000000000000000})

19:34:38 executing program 0:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x40000000})

19:34:38 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xfdfdffff})

[ 2740.079434] net_ratelimit: 12 callbacks suppressed
[ 2740.079443] protocol 88fb is buggy, dev hsr_slave_0
[ 2740.089563] protocol 88fb is buggy, dev hsr_slave_1
19:34:38 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0)

19:34:38 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xa100000000000000})

19:34:38 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xffffffff00000000})

19:34:38 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]})

19:34:38 executing program 0:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x3f000000})

19:34:38 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xa1000000})

19:34:39 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]})

19:34:39 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x2})

19:34:39 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x300000000000000})

19:34:39 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x100000})

19:34:39 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xfdfdffff})

19:34:39 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]})

[ 2741.039379] protocol 88fb is buggy, dev hsr_slave_0
[ 2741.039414] protocol 88fb is buggy, dev hsr_slave_0
[ 2741.044490] protocol 88fb is buggy, dev hsr_slave_1
[ 2741.049534] protocol 88fb is buggy, dev hsr_slave_1
[ 2741.059673] protocol 88fb is buggy, dev hsr_slave_0
[ 2741.064768] protocol 88fb is buggy, dev hsr_slave_1
19:34:40 executing program 3:
pipe2(&(0x7f0000000000), 0x80000)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000b00)='/dev/usbmon#\x00', 0x0, 0x0)
close(r1)
socket$inet6_sctp(0xa, 0x200000000000005, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x23, &(0x7f0000000140)={0x0, 0xffffffff80000001}, 0x8)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req={0x400, 0x40, 0x6, 0x5}, 0xfffffffffffffee4)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)

19:34:40 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x300})

19:34:40 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x4000})

19:34:40 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]})

19:34:40 executing program 0:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x300})

19:34:40 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x2})

19:34:40 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]})

19:34:40 executing program 0:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x200000000000000})

19:34:40 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xfffffdfd})

19:34:40 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xa100})

19:34:40 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x3f00})

19:34:40 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]})

19:34:41 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x44001)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r1, 0xf, 0x1}, 0x14)
r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x137100)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x0, 0xffffffffffffff9c})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)

19:34:41 executing program 0:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xfdfdffff00000000})

19:34:41 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xfdfdffff00000000})

19:34:41 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x100000})

19:34:41 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]})

19:34:41 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xfdfdffff00000000})

19:34:41 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]})

19:34:41 executing program 0:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0xfdfdffff00000000})

19:34:41 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x3000000})

19:34:41 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x3})

19:34:41 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x200000000000000})

19:34:41 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]})

[ 2743.119365] protocol 88fb is buggy, dev hsr_slave_0
[ 2743.124465] protocol 88fb is buggy, dev hsr_slave_1
19:34:42 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8000, 0x0)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080), 0x4)
write$cgroup_int(r1, &(0x7f0000000040)=0xfffffffffffffffb, 0x12)

19:34:42 executing program 0:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x4000000000000000})

19:34:42 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x100000000000000})

19:34:42 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]})

19:34:42 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x3000000})

19:34:42 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x100000000000000})

19:34:42 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xffffff7f})

19:34:42 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x100000})

19:34:42 executing program 0 (fault-call:3 fault-nth:0):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:42 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x4000000000000000})

19:34:42 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]})

19:34:42 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x3})

19:34:43 executing program 3:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000280), 0x4)
socketpair(0x8, 0x1, 0x401, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'nat\x00'}, &(0x7f0000000180)=0x78)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000001c0)={'icmp\x00'}, &(0x7f0000000200)=0x1e)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)

19:34:43 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x40000000})

19:34:43 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]})

19:34:43 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:43 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x300})

19:34:43 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xa1})

19:34:43 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x3})

19:34:43 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]})

19:34:43 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x2})

19:34:43 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x5460, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:43 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x1000000})

19:34:43 executing program 3:
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
prctl$PR_SVE_GET_VL(0x33, 0x12d01)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x9}, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)

19:34:43 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]})

19:34:43 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x10000000000000})

19:34:43 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x4000})

19:34:43 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]})

19:34:43 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x20001)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040), 0x4)

19:34:43 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x2000000})

19:34:43 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4008ae61, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:43 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x100000000000000})

19:34:43 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xffffffff00000000})

19:34:43 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]})

19:34:43 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xfffffdfd})

19:34:43 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})

[ 2745.199388] net_ratelimit: 6 callbacks suppressed
[ 2745.199397] protocol 88fb is buggy, dev hsr_slave_0
[ 2745.199421] protocol 88fb is buggy, dev hsr_slave_0
[ 2745.204329] protocol 88fb is buggy, dev hsr_slave_1
[ 2745.209394] protocol 88fb is buggy, dev hsr_slave_1
[ 2745.224517] protocol 88fb is buggy, dev hsr_slave_0
[ 2745.229707] protocol 88fb is buggy, dev hsr_slave_1
19:34:43 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020940d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:43 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x100000})

19:34:44 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xa100})

19:34:44 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]})

[ 2745.599479] protocol 88fb is buggy, dev hsr_slave_0
[ 2745.604679] protocol 88fb is buggy, dev hsr_slave_0
[ 2745.609810] protocol 88fb is buggy, dev hsr_slave_1
19:34:44 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x1)
sendto$inet(r1, &(0x7f0000000040)="6639ee068f17235483cd98092a1ada4953b93050263a133282787d518ce7cf2600b4423683bfda0ddb3896e843de1fe9f594c980927c2117611f2eac4dd8", 0x3e, 0x40000, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

19:34:44 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x200000000000000})

19:34:44 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:44 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0xa1})

19:34:44 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]})

19:34:44 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x2})

19:34:44 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]})

19:34:44 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x100000000000000})

19:34:44 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x10000000000000})

19:34:44 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x5450, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:45 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]})

19:34:45 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req={0x9, 0x0, 0x8, 0x8}, 0x10)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)
r1 = dup2(r0, r0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={<r2=>0x0, 0x5, 0x2000000000000000}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r2}, &(0x7f0000000100)=0x8)

19:34:45 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x4000000000000000})

19:34:45 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xffffffff00000000})

19:34:45 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:45 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x4000000000000000})

19:34:45 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x2000000})

19:34:45 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})

19:34:45 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x10})

19:34:45 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]})

19:34:45 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020aea5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:45 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x1000000000000})

19:34:45 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x300})

[ 2747.279425] protocol 88fb is buggy, dev hsr_slave_0
19:34:46 executing program 3:
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x3ff, 0x80000001}, 0x0, 0x0)
r0 = shmget(0x0, 0x11000, 0x54000400, &(0x7f0000fef000/0x11000)=nil)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
shmat(r0, &(0x7f0000ff7000/0x1000)=nil, 0x1000)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000001e000000101000008e703000000000008e000000145d57773de37306677973b9448c23d2ab2a077376dc4c0a69982a8b1e5e60fd11853e3885efae011ec4d73a79c0adac1e875215e017b235d6dcce1d4e0557e5062c6eaf77e997edc7376e0d6f11c4cd342170e7a4fb9d2c87f232ba31713cd7edc721ed714a12493b1f5fe1f3e2c549758ba147a011eada8becc202d9907131eefb555c975429eba22325a5da6b3711afbf48521551e40"], 0x391)

19:34:46 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]})

19:34:46 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x10})

19:34:46 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x2})

19:34:46 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xfdfdffff})

19:34:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0045878, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:46 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})

19:34:46 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x300000000000000})

19:34:46 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8c, 0x10000)
ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000040)={0x6, 0x1})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)

19:34:46 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xa100})

19:34:46 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x10000000000000})

19:34:46 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]})

19:34:46 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xfdfdffff00000000})

19:34:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc020660b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:46 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xa1000000})

19:34:46 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]})

19:34:46 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xffffff7f00000000})

19:34:46 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xa1000000})

19:34:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae76, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:46 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xa1})

19:34:47 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req={0x5, 0x1200000000000, 0x1, 0x101}, 0x10)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000180))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x3}, @in6={0xa, 0x4e21, 0x40, @local, 0x1}], 0x2c)
ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000040))

19:34:47 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]})

19:34:47 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x40000000})

19:34:47 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x3000000})

19:34:47 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x2})

19:34:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc008ae67, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:47 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]})

19:34:47 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x200000000000000})

19:34:47 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:47 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x100000000000000})

19:34:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x40049409, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:47 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]})

19:34:48 executing program 3:
r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c)
ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)=0x200)
r1 = socket$packet(0x11, 0xffffffffffbfffff, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x200, 0x0)
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000180)={0x8}, 0x0, 0x0)

19:34:48 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xfdfdffff00000000})

19:34:48 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]})

19:34:48 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x3000000})

19:34:48 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:48 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4008ae6a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:48 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]})

19:34:48 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x300000000000000})

19:34:48 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:48 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x5452, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:48 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x10000000000000})

19:34:48 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})

19:34:49 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2000, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
write$FUSE_CREATE_OPEN(r1, &(0x7f00000003c0)={0xa0, 0x0, 0x5, {{0x0, 0x0, 0x4a92, 0x3, 0xbf90, 0x7fff, {0x2, 0xf9, 0x20, 0x5, 0x1f, 0x6, 0x9, 0xffffffffffff0001, 0x0, 0x8, 0x4, r2, r3, 0xff}}, {0x0, 0x4}}}, 0xa0)
ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000180)={0x0, @ctrl})

19:34:49 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xa100000000000000})

19:34:49 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:49 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]})

19:34:49 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xffffffff00000000})

19:34:49 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0045878, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:49 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]})

19:34:49 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x3})

19:34:49 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x100000})

19:34:49 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x5421, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:49 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:49 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})

[ 2751.439382] net_ratelimit: 13 callbacks suppressed
[ 2751.439392] protocol 88fb is buggy, dev hsr_slave_0
[ 2751.439528] protocol 88fb is buggy, dev hsr_slave_0
[ 2751.444454] protocol 88fb is buggy, dev hsr_slave_1
[ 2751.449518] protocol 88fb is buggy, dev hsr_slave_1
[ 2751.464668] protocol 88fb is buggy, dev hsr_slave_0
[ 2751.469780] protocol 88fb is buggy, dev hsr_slave_1
19:34:50 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f0000000140)={0x7f, 0x0, 0x4, 0x0, 0x4000}, 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20080, 0x0)
getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000040)={@dev, @local}, &(0x7f0000000080)=0x8)

19:34:50 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xfffffdfd})

19:34:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4068aea3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:50 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xa1})

19:34:50 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:50 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]})

19:34:50 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]})

19:34:50 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:50 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xa100000000000000})

19:34:50 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xfdfdffff00000000})

19:34:50 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]})

19:34:50 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x141600, 0x0)
ppoll(&(0x7f0000000080)=[{r1, 0x2}, {r1, 0x10}], 0x2, &(0x7f0000000100), &(0x7f00000001c0)={0x6bf}, 0x8)
connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x1, @loopback}}, 0x1e)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xfffffffffffffc2b)
bind$pptp(r1, &(0x7f0000000200)={0x18, 0x2, {0x2, @multicast1}}, 0x1e)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)

19:34:50 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x3000000})

19:34:50 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:50 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x3f00000000000000})

19:34:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xae41, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:50 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]})

19:34:51 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x1000000})

19:34:51 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:51 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xfffffdfd})

19:34:51 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]})

19:34:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xae03, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:51 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x2000000})

[ 2752.559400] protocol 88fb is buggy, dev hsr_slave_0
[ 2752.564521] protocol 88fb is buggy, dev hsr_slave_1
19:34:51 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x8)
ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x8, "45d29c3dc64027e3f71d5318b07386b91d53bffa84ca4d5d1597cf4e37396184", 0x2, 0x1})
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x61)
ioctl$KDDISABIO(r1, 0x4b37)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea}, 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x4}, 0x0, 0x0)

19:34:51 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x3f000000})

19:34:51 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:51 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

19:34:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:51 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x3})

19:34:51 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]})

19:34:51 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xffffff7f})

19:34:51 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:51 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x300000000000000})

19:34:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae68, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:52 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]})

[ 2753.519399] protocol 88fb is buggy, dev hsr_slave_0
[ 2753.519443] protocol 88fb is buggy, dev hsr_slave_0
19:34:52 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x2)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x1, 0x1, 0x81, 0x2, 'syz1\x00'})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)

19:34:52 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x4000})

19:34:52 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x40000000})

19:34:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:52 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:52 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]})

19:34:52 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]})

19:34:53 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x4000})

19:34:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x5451, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:53 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x200000000000000})

19:34:53 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:53 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]})

19:34:54 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]})

19:34:54 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x300})

19:34:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:54 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xa1000000})

19:34:54 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xfffffffffffffea0)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
ioctl$FICLONE(r0, 0x40049409, r0)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000040)={0x5000000, "c51343cf9537d79744a9a3e0ae834375a261ecfdc04f5b33dd43497a85bd6e2c", 0x2, 0x1})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'ifb0\x00', {0x2, 0x4e24, @loopback}})
syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')

19:34:54 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:54 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]})

19:34:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc00caee0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:54 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x10})

19:34:54 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:54 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]})

19:34:54 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xfdfdffff})

19:34:54 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0xffff8000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:54 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:54 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x3f00})

19:34:55 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, 0x0, &(0x7f0000000140)={0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0)
r1 = socket(0x4, 0x6, 0x10b0)
sendmsg$kcm(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="34166fa4085c10c00f0990e33784d0d39cba7742334fe7e08f9b15938f6aea1060299e429edfbe5b7fc4b47e888716bc5245a6e88b2a238da3267f04f4ef7ce9ffbdddc1bf3d7fed82304857f673fabdf951d5412c5c3baa4d197f1ddfa6c3a21612fe49bf1172a057a885ea1c6b209052d18aaac6866214b12170c333a04e1117080691fe72bc5c64ee794a724a0246dbc1d227abe5a719881c4c32555a65a4d11bd4fd726c8c8bedaf3e9b568d6e7ba13ef1795408c4e577462b9b1b807ca378a404635afb86732412dbc5009fb3bf803e00db7b038f285172aaf22aa6eb7b154569", 0xe3}, {&(0x7f0000000000)="7112015e809ee28b8da1b2f8d6de0431e3beaee08d7c4fe1fedfdfc19b90efb2ec48ac1991c7462f56027f71ddb0cbeb532d1327b90469f1a22492963e428f91647fafddd34ef5144737492c407af71a908bec317e3d0d36d4ad7428de2f405f101fb7cd51acbc4919f49d5047732b", 0x6f}, {&(0x7f0000000280)="56f1e1008c4fe9624b8acead846ba2ac32c49a797ea6712e9bd602ced0f51c3c01e075f99e39f07ca1d153a591928e634a3e42e58c941762b3ea55d607327057045698c6325ea7b4161af7b042c3e334182f0854e45bfd37d864b022f8c755cbd3c18f5d11402142411db3f44661ced72946dc6373b3c42546585287a6cf9de85f22d22a21347df609fac3be49a896f3634bda2c1480b78cf3765b78a85ea29c6ce423c68fbed4cc4f0cd1e340d3520fbd7b11bad9d2d4c60115c6cc4b848d71f3498271de53c6ea98e195351a79c37767a728e425b12e625d62a5153518c76a6f278c707bec", 0xe6}, {&(0x7f0000000380)="d0bf91d1e2aa7c976c51d1231505d2c225abab5a9654bad6e18679bded2c4e0b0df44fcf3cd04ef0e7d419855c22861cc2cd01fc6b4c324748582ae468b6d1573919a1ad8f519b00b55ffe80b4f643c147baded0b41f3189ca4236d4097e171f90ac1414", 0x64}, {&(0x7f0000000400)="874dad8e392c1ca106ec5b240d7e6d314e984ce7faa8fe144ad6ad6f346a67ac7459abacc932d17313cbc7797ba9757ff89a0a0f03c1c4db2e4de951fa622b01d7d86c4575247b58b7dc226fa4f1c21e10af7e2f867a2488a7c873cde534ea904cab7f7a53fe39760a418525eb04b9ca56e8172d3a55754d6a067920c8d2f7b183ce0f83119213472899bc1139a9a115ea1299538a112c44a8c7dde184a72bc9c8efc56ffb088d13883aafc4c2b4a1585d25e8a0b222f4e5935db59a5d46de01d367a9cca914efacc0e8bdc03b236ae475a9eb3d0a2781b51c5b055c9261ebfb101a964d3f2b9ffffe97b310bc3d1a3ecd7f", 0xf2}, {&(0x7f0000000080)="55616a6ba077fa3ee0d4d7ffda77ff80eefe1b676704d724536d76e3684d39de238f672bd49adf90b02aa0f6e911cb8d6bd699ea", 0x34}], 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1588}, 0x40080)

19:34:55 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]})

19:34:55 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:55 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x1000000})

19:34:55 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:55 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]})

19:34:55 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:55 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0xa100})

19:34:55 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x1fc, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:55 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]})

[ 2756.719392] net_ratelimit: 18 callbacks suppressed
[ 2756.719401] protocol 88fb is buggy, dev hsr_slave_0
[ 2756.729565] protocol 88fb is buggy, dev hsr_slave_1
19:34:56 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = dup2(r0, r0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="70c96cd62bd05239df16cfe019e535b29e12f8b08936e81ef30f377bb46cf0de425c20d72074a11bda078c0efb098290d7a77650d6bb5e60", 0x38}], 0x1, 0x2)

19:34:56 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:56 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x300})

19:34:56 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]})

19:34:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0xfc010000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:56 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:56 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})

19:34:56 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:56 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:56 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x8000000000000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:56 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]})

[ 2757.679366] protocol 88fb is buggy, dev hsr_slave_0
[ 2757.679394] protocol 88fb is buggy, dev hsr_slave_0
[ 2757.684472] protocol 88fb is buggy, dev hsr_slave_1
[ 2757.689520] protocol 88fb is buggy, dev hsr_slave_1
[ 2757.699656] protocol 88fb is buggy, dev hsr_slave_0
[ 2757.704771] protocol 88fb is buggy, dev hsr_slave_1
[ 2758.079380] protocol 88fb is buggy, dev hsr_slave_0
[ 2758.084531] protocol 88fb is buggy, dev hsr_slave_0
19:34:57 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="410000002000000002000000d90f00000000000004000000060000000700000007000000020000000300e4ae"]})
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000180))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/udplite\x00')
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f00000004c0)=0x433)
fsetxattr$security_ima(r1, &(0x7f0000000280)='security.ima\x00', &(0x7f0000000480)=@ng={0x4, 0x4, "a7e9"}, 0x4, 0x1)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0)
chroot(&(0x7f0000000080)='./file0\x00')
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000002c0)={0x3, 0x81, 0x9, 0x6, 0x7, 0x3f})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00')
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000500)={0x0, @reserved})
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8012}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x801)
rmdir(&(0x7f0000000040)='./file0\x00')

19:34:57 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:57 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:57 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]})

19:34:57 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:57 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x80ffff00000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:57 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]})

19:34:57 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:57 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:57 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:57 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})

19:34:57 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x80ffff, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:58 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = gettid()
r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendmsg$nl_netfilter(r1, &(0x7f00000028c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002880)={&(0x7f0000000180)={0x26e0, 0x7, 0x4, 0x2, 0x70bd25, 0x25dfdbfd, {0x3, 0x0, 0x8}, [@nested={0x2010, 0x4b, [@generic="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", @typed={0xc, 0x4c, @u64=0x1}, @generic="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"]}, @nested={0x94, 0x38, [@generic="bc3907d538886d5c8fba8d78caf04f6295576fb3a241ce4d7ea78dac0f4ba86362dea2e6346b79b24fdc939b519cdbc71ebf51f84c0e30f2be968a84a1e6f1bf17fd34fefa388497a74db1b5e5e416a404d53216329203cfad1124162a854ded1f2800825739e5e5200a405b3b154a26070ce59132ab83473a44f66483b498febc174c5756ae4e4fb5f0d594a8420ce4"]}, @nested={0x354, 0x21, [@generic="7ab10ac0658a6f930912caa58063255d30991afa4ace6535e7e62451b3b35156c887651e9a692757f094ef9f9938c3ad4f829836a1e841cb4b054f372a5ef2d86b7ba81fdeb01ed163b9962636bf3322e2e153f3aa113a4cbcab551e12029a51658e5aaaacd4b6a26f472f1ba77e960c220f31750fc1655ea8ae18ab80cc99677ed7a1b4a8a9c1be", @typed={0xc, 0x90, @u64=0xbfe}, @typed={0x8, 0x30, @u32=0x1}, @generic="ccc50f950b0cc8af9a66770a04751b4aab67096db00308a82ce97c7585e8b33d9ec1a0fca70713df842d01d63f7f5883423f8d72fd3498de3cf2ed753b9bf5872ed71d1628a0696581f9bf57b9e4ede87a3a191b78eb74c7facd57817883113c3690d3b70697a437c6e5f7825ef8915f200e56f7cd084919cb1bf6ac48a6734314c1bed9f6e29f6d7df01ea427f91a5575e1db5a12ce63fc8dd52fe641bd76b15b8e38e208335214b7bc376bafd2677d86a317c19509d687793e8f2eb44b5e8724630a5af988ba381c4cd73889d8bf391e2eaef40321f6a5eb7ca2a1504314221d11aad47132e080fd166c7c195251d53ff3df125f57778e", @generic="c511175ad7860b8a9c91d06549531ab2bd2d97e29ec317b79f5245139de722d3d39abf0293159cb76c020873bb4b6eb8c9f42d765f4ce96a035f85a9f913efa7b3251c12f4d4df1b5490bd86912b4b22e033d225792914c8dc2e26d5685fb97e56ff0695a2cd5e50be1f4d1e8af98dd1262e8aa82866bbddc0d72f98278fffcbdda36939ec9a35597dffdaeedb4c769e3de78c9dd7c6c859bd950d2ef6c42b3f6e5918ceaffdb8eebfd1e922ac165235679233a2163ad63f42a36dbdc1a7c0ce02102f358cdab73c32bbe0d73bbd6024b38068feafddecea6f7993f2e28f0de0c6d8231083e66eb0472ba509", @generic="82f1d97aa107fb888d53f34fe2fe5260cf02a3501185f821d533060a68b2dbd8b342e3231af429ec99e4473ea51bebc262e1d9d41678ab", @typed={0x4, 0x3f}, @generic="9cfa93735820abb1347ae0d389191b61c285f2d655d2c8fa3e6adec9a5f37fdacd3aaabcacb637e31a94e9da41a7cacaf23f38aad4e8f7d66fced7c483cb1a51410ad7cb01c127f64a747602560fe2c746ea07b784c8eb0f1c5590d60b5cfcec7b2b27a756b197b82bcd39ebdad8dc14cbaee3de825eff73b0f08382f852460148e917d366ab46b01d7a6d", @typed={0x8, 0x1b, @ipv4=@broadcast}]}, @generic="432dfaa18e559b31af0a3b05f9a257b30c6d5af3ab12709cc5e05118016fd2aeb108bff2788665c2c9c2158ea2970da01dc3af502bfd95336a958646639aba8acb7ed40acd982810e26a3cdd91e1f16a07688d42ab3e583347926d0177c167c3fbecba980d34a65ada2a090c06f2f59e31212f933ca8ada568e48b002caf4ae65decdb6af1a0b6650435ac4a57164657a4dabc4d5761d8c5464d7c1b813634", @nested={0x148, 0x19, [@generic="fc95be91a2ab5e42ceae66ddc243ce0934e341b82d3ff7838542", @generic="0b160a71e4220cfc44fc276ff0c15b467c38143728e476f0191facfe563de077bf0da83367d2696fd981ffe8e9cea73ad5f2b4c9d1aaaa4b94023893ccd69384ce6575726f3583727ce796338e298bf4aeaee42a", @generic="f6f0f4f9f7ca72dbca5a5aee800fc59a121c0a208da2763e53", @typed={0xb4, 0x73, @binary="f6516666d3d4750d0344070b5a888cdcae0a97a84f64429e4b13194f42161e87d08bf2892a43a3c1255fe406cf4889d30fcb1cf4a356a105d013447729788f0b9bd09b38303af85c336eff7f0f19e9003cedefe9c28c990b4015fc32effa9988fed742804e71aa8d8c22376df9972880dcef01157231deee5d2075914e628e2a78cd6aa8fa501a647aba685e228cb65912e548c80606aadddf05b04f01d5a2377c013c2a6c17f2326ff851bdcd5031"}, @typed={0x8, 0xd, @pid=r2}]}, @typed={0x8, 0x80, @fd=r3}, @generic="00d9b6dd4b099650858fc4c5597ed9e383afb951334b5f469d55ae7f04d1c9d10ec27956b94cb859613000491c0a6e5121d68c8d11ba2de25c54b525bdf1f25266290c73611b4f55a9c7afab9db6877e3c5f32dafe6e7ea344b670024e83787a7c9d6325ef24f5da27cfb7b5805048c6885181b76c19b69373aa5217463b3e5bc7ce306b9bd07fa29708b909db98bd0b0a8518f9a5f7d5e8d1f7ed9cf66226caa9159bb49503178f03e39f30f483e319ea24a76f4d5be7fa64126b2f8083bdbdb576184e6235a665a669b345807992c40386ff2d0b3c5627361bf6a6a6b05f85d36315f0"]}, 0x26e0}, 0x1, 0x0, 0x0, 0x4004}, 0x1)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000002900)=0x20004)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000002a00)=@req3={0x40, 0x4, 0x7f, 0x7ff, 0x0, 0x8, 0x3ff8}, 0xfffffffffffffe53)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)

19:34:58 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x1000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:58 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:58 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:58 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:58 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]})

19:34:58 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:58 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]})

19:34:58 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:58 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:58 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x2000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:58 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]})

19:34:59 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)

19:34:59 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:59 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:59 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0, 0xa100})

19:34:59 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]})

19:34:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0xfffffdfd, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:34:59 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]})

19:34:59 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]})

19:34:59 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:59 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0, 0x10})

19:34:59 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:34:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:35:00 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x8000)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000180))
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040), 0x4)

19:35:00 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]})

19:35:00 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0, 0x300})

19:35:00 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:35:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0xfc01000000000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:35:00 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:35:00 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]})

[ 2761.839383] net_ratelimit: 8 callbacks suppressed
[ 2761.839391] protocol 88fb is buggy, dev hsr_slave_0
[ 2761.839429] protocol 88fb is buggy, dev hsr_slave_0
[ 2761.844351] protocol 88fb is buggy, dev hsr_slave_1
[ 2761.849450] protocol 88fb is buggy, dev hsr_slave_1
19:35:00 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:35:00 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]})

19:35:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0xfdfdffff00000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:35:00 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:35:00 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd})

[ 2762.239371] protocol 88fb is buggy, dev hsr_slave_0
[ 2762.244649] protocol 88fb is buggy, dev hsr_slave_0
[ 2762.249760] protocol 88fb is buggy, dev hsr_slave_1
19:35:01 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:35:01 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]})

19:35:01 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:35:01 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0xfc01, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:35:01 executing program 3:
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x52002, 0x0)
ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000040))
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x4, 0x10000, 0xffff, 0x80000000, 0x41a1e8e, 0x6})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0)

19:35:01 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000})

19:35:01 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:35:01 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x100000000000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:35:01 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]})

19:35:01 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000})

19:35:01 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

[ 2762.959386] protocol 88fb is buggy, dev hsr_slave_0
[ 2762.964583] protocol 88fb is buggy, dev hsr_slave_1
19:35:01 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]})

19:35:01 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:35:01 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:35:01 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})

19:35:01 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0, 0x100000000000000})

19:35:02 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2000, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000002c0)={0x34, 0x0, &(0x7f0000000280)})
ioctl$TIOCSTI(r1, 0x5412, 0xffffffffffffda7c)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x6000, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={<r2=>0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x401, 0x2}, &(0x7f0000000040)=0x90)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r2, 0xbb}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000340)={r2, 0x8, 0x100, 0x3}, 0x10)

19:35:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0xfdfdffff, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:35:02 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]})

19:35:02 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:35:02 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0, 0x1000000000000})

19:35:02 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:35:02 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})

19:35:02 executing program 1:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:35:02 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0})

19:35:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0xffff8000, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil})

19:35:02 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300, 0x0, 0x0, 0x0, 0x0, 0xa100000000000000})

19:35:02 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]})

[ 2764.099392] ==================================================================
[ 2764.107249] BUG: KASAN: slab-out-of-bounds in kvm_clear_dirty_log_protect+0x8cf/0x970
[ 2764.115234] Read of size 8 at addr ffff8880941d8e50 by task syz-executor0/7825
[ 2764.122600] 
[ 2764.124244] CPU: 1 PID: 7825 Comm: syz-executor0 Not tainted 4.20.0+ #7
[ 2764.131003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2764.140359] Call Trace:
[ 2764.142959]  dump_stack+0x1db/0x2d0
[ 2764.146600]  ? dump_stack_print_info.cold+0x20/0x20
[ 2764.151646]  ? kvm_clear_dirty_log_protect+0x8cf/0x970
[ 2764.156942]  print_address_description.cold+0x7c/0x20d
[ 2764.162237]  ? kvm_clear_dirty_log_protect+0x8cf/0x970
[ 2764.167528]  ? kvm_clear_dirty_log_protect+0x8cf/0x970
[ 2764.172820]  kasan_report.cold+0x1b/0x40
[ 2764.176909]  ? kvm_clear_dirty_log_protect+0x8cf/0x970
[ 2764.182205]  __asan_report_load8_noabort+0x14/0x20
[ 2764.187185]  kvm_clear_dirty_log_protect+0x8cf/0x970
[ 2764.192310]  ? vcpu_stat_get_per_vm_open+0x40/0x40
[ 2764.192334]  ? lock_downgrade+0x910/0x910
[ 2764.192349]  ? lock_release+0xc40/0xc40
[ 2764.192378]  kvm_vm_ioctl_clear_dirty_log+0xff/0x260
[ 2764.192403]  ? kvm_vm_ioctl_get_dirty_log+0x260/0x260
[ 2764.215708]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2764.221265]  ? _copy_from_user+0xdd/0x150
[ 2764.225441]  kvm_vm_ioctl+0xc19/0x1fe0
[ 2764.229338]  ? __lock_acquire+0x572/0x4a30
[ 2764.233585]  ? kasan_check_read+0x11/0x20
[ 2764.237741]  ? do_raw_spin_unlock+0xa0/0x330
[ 2764.242161]  ? kvm_unregister_device_ops+0x70/0x70
[ 2764.247111]  ? mark_held_locks+0x100/0x100
[ 2764.251369]  ? debug_smp_processor_id+0x1c/0x20
[ 2764.256044]  ? perf_trace_lock_acquire+0x138/0x7d0
[ 2764.260987]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2764.265921]  ? perf_trace_lock+0x750/0x750
[ 2764.270170]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2764.275711]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2764.281252]  ? __fget+0x472/0x710
[ 2764.284711]  ? find_held_lock+0x35/0x120
[ 2764.288775]  ? __fget+0x472/0x710
[ 2764.292234]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2764.297781]  ? lock_downgrade+0x910/0x910
[ 2764.301935]  ? kasan_check_read+0x11/0x20
[ 2764.306101]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2764.311385]  ? rcu_read_unlock_special+0x380/0x380
[ 2764.316335]  ? __fget+0x499/0x710
[ 2764.319800]  ? iterate_fd+0x4b0/0x4b0
[ 2764.323602]  ? lock_release+0xc40/0xc40
[ 2764.327584]  ? kvm_unregister_device_ops+0x70/0x70
[ 2764.332517]  do_vfs_ioctl+0x107b/0x17d0
[ 2764.336508]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2764.340928]  ? __fget_light+0x2db/0x420
[ 2764.344907]  ? fget_raw+0x20/0x20
[ 2764.348364]  ? put_timespec64+0x115/0x1b0
[ 2764.352522]  ? nsecs_to_jiffies+0x30/0x30
[ 2764.356681]  ? do_syscall_64+0x8c/0x800
[ 2764.360663]  ? do_syscall_64+0x8c/0x800
[ 2764.364640]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2764.369231]  ? security_file_ioctl+0x93/0xc0
[ 2764.373654]  ksys_ioctl+0xab/0xd0
[ 2764.377126]  __x64_sys_ioctl+0x73/0xb0
[ 2764.381020]  do_syscall_64+0x1a3/0x800
[ 2764.384916]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2764.389858]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2764.394889]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2764.399746]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2764.404935] RIP: 0033:0x457ec9
[ 2764.408135] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2764.427035] RSP: 002b:00007f5740993c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2764.434743] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9
[ 2764.442010] RDX: 0000000020000080 RSI: 00000000c018aec0 RDI: 0000000000000004
[ 2764.449282] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2764.456552] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57409946d4
[ 2764.463819] R13: 00000000004c9ef0 R14: 00000000004d2a10 R15: 00000000ffffffff
[ 2764.471119] 
[ 2764.472764] Allocated by task 7825:
[ 2764.476399]  save_stack+0x45/0xd0
[ 2764.479864]  kasan_kmalloc+0xcf/0xe0
[ 2764.483581]  __kmalloc_node+0x4e/0x70
[ 2764.487383]  kvmalloc_node+0x68/0x100
[ 2764.491187]  __kvm_set_memory_region+0x1da1/0x2c40
[ 2764.496132]  kvm_set_memory_region+0x2f/0x60
[ 2764.500541]  kvm_vm_ioctl+0xafa/0x1fe0
[ 2764.504433]  do_vfs_ioctl+0x107b/0x17d0
[ 2764.508409]  ksys_ioctl+0xab/0xd0
[ 2764.511868]  __x64_sys_ioctl+0x73/0xb0
[ 2764.515761]  do_syscall_64+0x1a3/0x800
[ 2764.519649]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2764.524828] 
[ 2764.526459] Freed by task 6598:
[ 2764.529737]  save_stack+0x45/0xd0
[ 2764.533191]  __kasan_slab_free+0x102/0x150
[ 2764.537423]  kasan_slab_free+0xe/0x10
[ 2764.541228]  kfree+0xcf/0x230
[ 2764.544338]  shmem_destroy_callback+0xa2/0xc0
[ 2764.548839]  rcu_process_callbacks+0xc4a/0x1680
[ 2764.553573]  __do_softirq+0x30b/0xb11
[ 2764.557366] 
[ 2764.558992] The buggy address belongs to the object at ffff8880941d8e40
[ 2764.558992]  which belongs to the cache kmalloc-32 of size 32
[ 2764.571471] The buggy address is located 16 bytes inside of
[ 2764.571471]  32-byte region [ffff8880941d8e40, ffff8880941d8e60)
[ 2764.583167] The buggy address belongs to the page:
[ 2764.588106] page:ffffea0002507600 count:1 mapcount:0 mapping:ffff88812c3f01c0 index:0xffff8880941d8fc1
[ 2764.597553] flags: 0x1fffc0000000200(slab)
[ 2764.601797] raw: 01fffc0000000200 ffffea00027eca48 ffffea00028d8e48 ffff88812c3f01c0
[ 2764.609680] raw: ffff8880941d8fc1 ffff8880941d8000 000000010000003f 0000000000000000
[ 2764.617552] page dumped because: kasan: bad access detected
[ 2764.623259] 
[ 2764.624883] Memory state around the buggy address:
[ 2764.629815]  ffff8880941d8d00: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc
[ 2764.637182]  ffff8880941d8d80: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc
[ 2764.644541] >ffff8880941d8e00: fb fb fb fb fc fc fc fc 00 00 fc fc fc fc fc fc
[ 2764.651891]                                                  ^
[ 2764.657864]  ffff8880941d8e80: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc
[ 2764.665222]  ffff8880941d8f00: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc
[ 2764.672575] ==================================================================
[ 2764.679928] Disabling lock debugging due to kernel taint
[ 2764.685687] protocol 88fb is buggy, dev hsr_slave_0
[ 2764.691067] Kernel panic - not syncing: panic_on_warn set ...
[ 2764.696980] CPU: 1 PID: 7825 Comm: syz-executor0 Tainted: G    B             4.20.0+ #7
[ 2764.705130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2764.714486] Call Trace:
[ 2764.717082]  dump_stack+0x1db/0x2d0
[ 2764.717242] kobject: 'loop4' (00000000aaca8358): kobject_uevent_env
[ 2764.720734]  ? dump_stack_print_info.cold+0x20/0x20
[ 2764.720760]  panic+0x2cb/0x589
[ 2764.720781]  ? add_taint.cold+0x16/0x16
[ 2764.727248] kobject: 'loop4' (00000000aaca8358): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 2764.732329]  ? trace_hardirqs_on+0xb4/0x310
[ 2764.732343]  ? trace_hardirqs_on+0xb4/0x310
[ 2764.732363]  ? kvm_clear_dirty_log_protect+0x8cf/0x970
[ 2764.732381]  end_report+0x47/0x4f
[ 2764.766390]  ? kvm_clear_dirty_log_protect+0x8cf/0x970
[ 2764.770318] kobject: 'loop1' (0000000001abc9c8): kobject_uevent_env
[ 2764.771687]  kasan_report.cold+0xe/0x40
[ 2764.778110] kobject: 'loop1' (0000000001abc9c8): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 2764.782068]  ? kvm_clear_dirty_log_protect+0x8cf/0x970
[ 2764.782099]  __asan_report_load8_noabort+0x14/0x20
[ 2764.782119]  kvm_clear_dirty_log_protect+0x8cf/0x970
[ 2764.806865]  ? vcpu_stat_get_per_vm_open+0x40/0x40
[ 2764.811813]  ? lock_downgrade+0x910/0x910
[ 2764.815969]  ? lock_release+0xc40/0xc40
[ 2764.819936]  kvm_vm_ioctl_clear_dirty_log+0xff/0x260
[ 2764.825040]  ? kvm_vm_ioctl_get_dirty_log+0x260/0x260
[ 2764.830235]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2764.835757]  ? _copy_from_user+0xdd/0x150
[ 2764.839894]  kvm_vm_ioctl+0xc19/0x1fe0
[ 2764.843765]  ? __lock_acquire+0x572/0x4a30
[ 2764.847985]  ? kasan_check_read+0x11/0x20
[ 2764.852122]  ? do_raw_spin_unlock+0xa0/0x330
[ 2764.856519]  ? kvm_unregister_device_ops+0x70/0x70
[ 2764.861441]  ? mark_held_locks+0x100/0x100
[ 2764.865673]  ? debug_smp_processor_id+0x1c/0x20
[ 2764.870329]  ? perf_trace_lock_acquire+0x138/0x7d0
[ 2764.875253]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2764.880170]  ? perf_trace_lock+0x750/0x750
[ 2764.884394]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2764.889920]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2764.895445]  ? __fget+0x472/0x710
[ 2764.898882]  ? find_held_lock+0x35/0x120
[ 2764.902933]  ? __fget+0x472/0x710
[ 2764.906381]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2764.911915]  ? lock_downgrade+0x910/0x910
[ 2764.916075]  ? kasan_check_read+0x11/0x20
[ 2764.920238]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2764.925523]  ? rcu_read_unlock_special+0x380/0x380
[ 2764.930465]  ? __fget+0x499/0x710
[ 2764.933924]  ? iterate_fd+0x4b0/0x4b0
[ 2764.937720]  ? lock_release+0xc40/0xc40
[ 2764.941697]  ? kvm_unregister_device_ops+0x70/0x70
[ 2764.946627]  do_vfs_ioctl+0x107b/0x17d0
[ 2764.950611]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2764.955025]  ? __fget_light+0x2db/0x420
[ 2764.958998]  ? fget_raw+0x20/0x20
[ 2764.962458]  ? put_timespec64+0x115/0x1b0
[ 2764.966607]  ? nsecs_to_jiffies+0x30/0x30
[ 2764.970762]  ? do_syscall_64+0x8c/0x800
[ 2764.974739]  ? do_syscall_64+0x8c/0x800
[ 2764.978715]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2764.983304]  ? security_file_ioctl+0x93/0xc0
[ 2764.987715]  ksys_ioctl+0xab/0xd0
[ 2764.991173]  __x64_sys_ioctl+0x73/0xb0
[ 2764.995067]  do_syscall_64+0x1a3/0x800
[ 2764.998970]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2765.003907]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2765.008933]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2765.013785]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2765.018974] RIP: 0033:0x457ec9
[ 2765.022174] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2765.041073] RSP: 002b:00007f5740993c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2765.048790] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9
[ 2765.056058] RDX: 0000000020000080 RSI: 00000000c018aec0 RDI: 0000000000000004
[ 2765.063332] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2765.070598] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57409946d4
[ 2765.077885] R13: 00000000004c9ef0 R14: 00000000004d2a10 R15: 00000000ffffffff
[ 2765.086259] Kernel Offset: disabled
[ 2765.089887] Rebooting in 86400 seconds..