@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x13}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xc}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000800}, 0xc00d0533d17a149b)
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000000)={0x3, 0x0, [{0x995, 0x0, 0x9}, {0xbf7, 0x0, 0x24c}, {0x166, 0x0, 0x10000000006}]})

18:33:20 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x80000000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000080)=0x128)

[ 1039.889835][ T1155] binder: 1154:1155 ioctl 40046207 0 returned -16
18:33:20 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000123503000001000000000000002560b700fff0ffff04040000000000000a00000006"])

18:33:20 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x7, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:20 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000012708a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

18:33:20 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x700})

[ 1040.101660][ T1398] binder_alloc: binder_alloc_mmap_handler: 1396 20001000-20004000 already mapped failed -16
18:33:20 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0)
getsockopt$inet6_int(r1, 0x29, 0xcb, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x90000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000080)={{0x3, 0x0, 0x5, 0x3, 0x3}, 0x1, 0x6, 'id1\x00', 'timer1\x00', 0x0, 0x5, 0x3ff, 0xa1, 0x3})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000040))

18:33:20 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x8, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1040.183096][ T1399] binder_alloc: 1396: binder_alloc_buf, no vma
[ 1040.210528][ T1398] binder: BINDER_SET_CONTEXT_MGR already set
[ 1040.224773][ T1398] binder: 1396:1398 ioctl 40046207 0 returned -16
18:33:20 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400203000001000000000000002560b700fff0ffff04040000000000000a00000006"])

18:33:20 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000020708a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

18:33:20 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000000)={<r2=>0x0, 0xffff}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r2, 0x7fff}, 0x8)

18:33:20 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="4447b24e0000000000010040050000a90000000000fa0400000000400003020001000000000000002560b700fff0ffff0404d0f318039c94bad8000006b4eddfd37cd3cdbbba23e809df999cf5c084"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

18:33:20 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x9, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1040.487746][ T1612] binder_alloc: binder_alloc_mmap_handler: 1582 20001000-20004000 already mapped failed -16
18:33:20 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x40, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x200000)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8)
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=<r5=>0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f00000004c0)=0xe8)
lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x80020, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x5}}, {@blksize={'blksize', 0x3d, 0x1800}}, {@max_read={'max_read', 0x3d, 0x896}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@euid_eq={'euid', 0x3d, r6}}, {@smackfshat={'smackfshat'}}, {@smackfsroot={'smackfsroot', 0x3d, ':*,/'}}, {@euid_eq={'euid', 0x3d, r7}}, {@smackfsdef={'smackfsdef', 0x3d, 'bdev,-\''}}, {@obj_type={'obj_type', 0x3d, '/dev/snapshot\x00'}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}})
ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000000080)={0x7f, 0x3, 0xebdb, 0x1, 0x9, 0xa, 0xd, "6bf6102cc2ba5d53ca9ad5c313361c893b3d7bd5", "6f70a3503a6bbfe2ea5f4ab3fe570920c772e660"})
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000040))
ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000780)=""/251)

18:33:20 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x900})

18:33:20 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0xa, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1040.541429][ T1590] binder: BINDER_SET_CONTEXT_MGR already set
[ 1040.558386][ T1590] binder: 1582:1590 ioctl 40046207 0 returned -16
[ 1040.560678][ T1651] binder_alloc: 1582: binder_alloc_buf, no vma
18:33:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400d03000001000000000000002560b700fff0ffff04040000000000000a00000006"])

18:33:21 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x44801000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x98, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="29a65b906f57d2ae24f08de07a2155df"}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x6}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x20000000004000, 0x0)
getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000000040))

18:33:21 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000048708a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

18:33:21 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0xb, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1040.858875][ T1801] binder_alloc: binder_alloc_mmap_handler: 1772 20001000-20004000 already mapped failed -16
18:33:21 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x8)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x800, 0x0, 0x61, 0x8b, 0x3, 0x1, 0x7fffffff, 0x8000, 0x7ff, 0x46, 0x11d, 0x3})
ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000000c0)=0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000100))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000040))

[ 1040.903729][ T1786] binder: BINDER_SET_CONTEXT_MGR already set
[ 1040.922047][ T1786] binder: 1772:1786 ioctl 40046207 0 returned -16
18:33:21 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400400, 0x0)
sendmmsg$nfc_llcp(r4, &(0x7f0000001ac0)=[{&(0x7f0000000140)={0x27, 0x0, 0x1, 0x1, 0x0, 0x8, "c3282d65b19ce3650c00bd83208c99fe30394e6a05f76c9ef3565b60cfd556231c567fdc5860f1659c9fcdcfbfe9d21baee343dc879021fae0ed0c17e232e8", 0x37}, 0x60, &(0x7f0000000840)=[{&(0x7f00000002c0)="37da07a8ac7e323cdfdb9f1cd3428035a0c779ea77c9eea9a13bf543f556fbd50f97556807d1a3a28227be3ab07471ef52ea8afa2dd27d04cc8199cb30d5a64faaf0c9edada8bf991bd6677823e39fb929220c70e894629c8f24cbde0be5d4d50f33965610fddcd09816f6a8c2b0e8f9650538450640323835e735279077b59b3591032c667854bd1b32c89947dc9def61d49a8014bd089d2227628c8823af99425869e013de94d3c3c61861f1c0f522f475f1c4c8754b0a26aea3adae9b8c5471dd7bd9379a8c4a386e73d3cfd3a4e11885a39ae15e7e8803cad5acee6d3506edad7d58b0b42aa79a7801f6a380b7aedd1aa1a87653a4d9a6ca3b", 0xfb}, {&(0x7f00000001c0)="fcee768f9ed83c0a78e2d835a63a6fa9a2a6cc5c86c724d13f13efb514e22c762b0c9db3c11b25417a3bdaa28c634fb5b4848d934d06f3f017e34ef88c89a4bb1c5a79bc666cf07dd64c859855e850d5b56ea44b7e495124af15a5318e3a006c8da7039bafec1d182856b9eb018c9d60daed4acb9c792323a3b6197be8dfacaf8518603b015b7e6389eb72616bea68882c23bdefa78829b3949dcbac698d13", 0x9f}, {&(0x7f00000003c0)="5b62b5c5a6aed2c2770fb68475bf7d94106e843126d8924fd33dc6cc4ed19373f6c230abe8b07e2aa3c2a47431f2354244150306b90236a237b59e02c5616768305de74c8dfa7c95ffd817ecf95ee273f59887ce3fba569c106e36bbc177b0bb43deb443f8948d44bd7d0fa17278f746df10784d1dff33a6478ad1899f7caa5f29ede91fc6550b8e7df4ad80811fcd866c6d89183e4197f91833037ec8eb5482544c7d2021a2d35ac0d689ad8484a928715cee4f11c9c49e06729efe", 0xbc}, {&(0x7f0000000480)="ec48abf42bc783608ef1454e617c81a12d6f7c8627b60bc2c992ae2ff7e29936ea849f33a44bc6c526ded8b698541e9fd703eb362e2dfb68556c0c2c9cbf0ed7d61386dc5531e84caf7432258d71b2b23ede68d39d5a094b61e743edc26a49958dc8a6c5952f02a92a66cae5887d37cbf9782e0736ec1ae8b311d9ea34ebe68e6bd44842697e0ebf51d5004fe6df6251c93ccadefb0995979ebc6265a00fa9f824cc5e799aadd38d1a6329cf277bb699a53034a37cb9439eb3f3602abe3cffcc69235beab0e7a94a6b14bb5da15d445dc2", 0xd1}, {&(0x7f0000000580)="ca7e44de0e5853a09beeb726ba34eac639cd69e931711a29a6ff809a329df5f4f373c67c7a24fc5ef24d81731fb810352a5989ab9cd4adad0ea8ebf69e49cf7319fd07974f4405277ad8a88d3fe13198ac6830479d6b1e117ead971ec37dd1a6279562aa131e6a615a5470781994695726ac0447eeeec2f57d71757d7c2292cf2e79e0fdf2e103", 0x87}, {&(0x7f0000000640)="fe5ab6da8e55f0b68260044ce9cf8b224436e0586420e8b8d2b9c2a64ea9913802502b347989859a75065b157dc452bc18094b5a7cd16b1d12ac8afe3f8e62dff51eac2cf19085aadc580fae72e7da5f8d3e089351909f733f22615729f61ef80e298f6761e08b2d376d427697d45cb17242117e2761a4b31d4c8221b2be2202c4ac8d20cb1815c5fbd9dee7703f99f9d02a1b52bbb905f32406f9a0a8d5ea1eaf3cde115138ed87010a39f8349dd16b45c75330315d522a8c2ff226a6364c8a524a1f8b33ef396e08951544f186a999a52efaad6a49d7ed002a60d06e9cda6a011a7210faf1c8ca69bc6beaa817e5dffd99e97582b868ef71", 0xf9}, {&(0x7f0000000740)="8dc13dcd4361c52816bd97b1da6fef372f65e9a89b2cc93261b50bfc784bf2b37ce0b224582fbb7f8c096baf7df8979a5ce6fdb0d7da53176aa8b78003cb73684119836194ef1dd237d102546ac121bd23ccff159234fd15ff8fea8ff63d3f52", 0x60}, {&(0x7f00000007c0)="23f51b06af58e6bfa21c6a892b3cb27355c407a2bd6f98cca616eb7f1c60cbc0433fdd1659c190dfb2726f218370999d85538ee958fec722ab5d9a95404c104f43f2f4f77acb5666d8813e69236fcf50a0", 0x51}], 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1010, 0x80}, {&(0x7f0000001900)={0x27, 0x0, 0x0, 0x0, 0xa4, 0x8, "56b0f7fc6349e3fabe3baae66eb36209a2e6ef2a4c967c449245cd371a10b6b5048496191e115c6260dd2eb8f478d1c54c1edbe344767da63924e5594d5b1d", 0x39}, 0x60, &(0x7f00000000c0)=[{&(0x7f0000001980)="13f2eeec2651cbf3677072b2f15bc06df2074691eefc45936e92efeb1269a8ac26484f48f25aece29444f793042b49a8bfee84825b0792e320b2af020a4702b7e0e5aac209702c8d599368d16e823e38110a8d53a707d5287ef0a0a08151abcc49d875725c0b3841b571c22f270c6065673eebacf8b973f6b46e0353931c3452782381d0ea4d6753e2e3e52d23e2151d90ed8d2360215240b8f7163abe29375d44bda567f9521bcd156ab5d3232a097925f4571677741f5f2fa9cf4410773d4abebab08afdbea538", 0xc8}], 0x1, &(0x7f0000001a80)={0x18, 0x117, 0xd3, "f5bd1cd254e1"}, 0x18, 0x80}], 0x2, 0x5)

18:33:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400005000001000000000000002560b700fff0ffff04040000000000000a00000006"])

18:33:21 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0xc, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1040.967167][ T3480] binder_release_work: 10 callbacks suppressed
[ 1040.967176][ T3480] binder: undelivered TRANSACTION_ERROR: 29201
18:33:21 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xa00})

18:33:21 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000001800004c708a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

18:33:21 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x80000000000000, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000100))
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400, 0x0)
ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000080)=0x1)
ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x2)

18:33:21 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0xd, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1041.233486][ T1934] binder_alloc: binder_alloc_mmap_handler: 1918 20001000-20004000 already mapped failed -16
18:33:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400005000001000000000000002560b700fff0ffff04040000000000000a00000006"])

[ 1041.278116][ T1919] binder: BINDER_SET_CONTEXT_MGR already set
[ 1041.295491][ T1919] binder: 1918:1919 ioctl 40046207 0 returned -16
18:33:21 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0xe, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1041.321842][ T1934] binder_alloc: 1918: binder_alloc_buf, no vma
[ 1041.356569][ T3036] binder: undelivered TRANSACTION_ERROR: 29189
18:33:21 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))

18:33:21 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000060708a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

[ 1041.397079][ T3036] binder: undelivered TRANSACTION_ERROR: 29201
18:33:21 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000000)=0x80, 0x800)
recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/64, 0x40}], 0x1, &(0x7f0000000200)=""/46, 0x2e}, 0x100)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000014c0))
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r5, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
fstat(r5, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000001480)={0x3, @bcast, r6})
getsockopt$inet_buf(r3, 0x0, 0x27, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=0x1000)
ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r4, 0x4138ae84, &(0x7f0000000040))
setsockopt$inet_buf(r3, 0x0, 0x28, &(0x7f00000002c0)="135f7d3ff415033d677bbd4425be1de66cd00145b337714518657fa95abd7b669d8e4e2872f680272427cb795927aa2b1a580758c42dfe887cc2f4d05715b717db8ff9b5e2ebd06e50bf3131f7ec0d3602a415a8a548446aa56b38667e07a087e48507c8c33758680c9041425dd52d3de2e414a7affb67bc831e8b9501e07352973bec17ccaa118773b9f4582ce820490ada6f52e17b7e49106c462510171c5d8076c1f4ef6459efb5b476b06100e72b63447f347538ea1b9f9fb84f0064b26a4f318e7c3425820ee30fb03b6727842b126a72509a9aff69ec4bd10db2c3f3da154528a7bcbf73ade3b2f230f099abe21110743803c19cf7", 0xf8)

18:33:21 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xb00})

18:33:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003020001000000000000002560b700fff0ffff04040000000000000a00000006"])

[ 1041.544555][ T2121] binder_alloc: binder_alloc_mmap_handler: 2114 20001000-20004000 already mapped failed -16
18:33:22 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400301000, 0x0)
ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000080)={0x0, 0x5})
ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f00000000c0)={r1, 0x1f30})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x8)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f00000001c0))

18:33:22 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0xf, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1041.618474][ T2116] binder: BINDER_SET_CONTEXT_MGR already set
[ 1041.646988][ T2120] binder_alloc: 2114: binder_alloc_buf, no vma
[ 1041.698050][ T3036] binder: undelivered TRANSACTION_ERROR: 29201
[ 1041.715945][ T2116] binder: 2114:2116 ioctl 40046207 0 returned -16
18:33:22 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x2200)
ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000040))

[ 1041.748024][ T3480] binder: undelivered TRANSACTION_ERROR: 29189
18:33:22 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x10, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:22 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000068708a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

18:33:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa00000000004000030d0001000000000000002560b700fff0ffff04040000000000000a00000006"])

18:33:22 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x40000000006, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))

18:33:22 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x11, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1041.964418][ T2319] binder_alloc: binder_alloc_mmap_handler: 2277 20001000-20004000 already mapped failed -16
18:33:22 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xc00})

[ 1042.045582][ T2301] binder: BINDER_SET_CONTEXT_MGR already set
[ 1042.070935][ T2301] binder: 2277:2301 ioctl 40046207 0 returned -16
[ 1042.070973][ T2364] binder_alloc: 2277: binder_alloc_buf, no vma
18:33:22 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x10803, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40000, 0x0)
write$P9_RRENAMEAT(r1, &(0x7f00000000c0)={0x7, 0x4b, 0x2}, 0x7)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000000010040450000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006b2a61ff0a7002450502d41d7aa94f91a4d56754a01706a729ae4e849"])
dup2(r0, r1)
ioctl$KVM_SET_MSRS(r3, 0x4138ae84, &(0x7f0000000040))

18:33:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000d01000000000000002560b700fff0ffff04040000000000000a00000006"])

18:33:22 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80000, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x178, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x637}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffffffffff01}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xd8f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hwsim0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x36}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2856}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100000000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5ec}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x40080)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, &(0x7f0000000040))
setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000300)={0xfffffffffffffffd, 0x7f, 0x1, 0xc16}, 0x10)

18:33:22 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x12, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1042.207123][ T3036] binder: undelivered TRANSACTION_ERROR: 29201
[ 1042.214106][ T2364] binder_transaction: 10 callbacks suppressed
[ 1042.214124][ T2364] binder: 2277:2364 transaction failed 29189/-3, size -2549729598636031976-8357212777111033060 line 3147
[ 1042.255458][ T3480] binder: undelivered TRANSACTION_ERROR: 29189
18:33:22 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000001800006c708a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

18:33:22 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x401, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x8)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))

[ 1042.400431][ T2459] binder: 2451:2459 transaction failed 29201/-22, size -2549729598568923112-8357212777111033060 line 3147
18:33:22 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x13, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:22 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xd00})

[ 1042.466148][ T2562] binder_alloc: binder_alloc_mmap_handler: 2451 20001000-20004000 already mapped failed -16
18:33:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000000050000000000002560b700fff0ffff04040000000000000a00000006"])

[ 1042.527037][ T2459] binder: BINDER_SET_CONTEXT_MGR already set
18:33:22 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x9)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x101000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001ff)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0)
ioctl$CAPI_INSTALLED(r1, 0x80024322)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x400004, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000000003, @mcast1}, 0x1c)
socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={'team_slave_1\x00', {0x2, 0x4e20, @broadcast}})
prctl$PR_GET_NO_NEW_PRIVS(0x27)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000000)=0x349)

18:33:22 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={<r3=>r0})
getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000140), &(0x7f0000000180)=0xc)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000000))
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

[ 1042.599288][ T2459] binder: 2451:2459 ioctl 40046207 0 returned -16
[ 1042.622121][ T2614] binder_alloc: 2451: binder_alloc_buf, no vma
[ 1042.664411][ T3036] binder: undelivered TRANSACTION_ERROR: 29201
[ 1042.669072][ T2614] binder: 2451:2614 transaction failed 29189/-3, size -2549729598568923112-8357212777111033060 line 3147
18:33:23 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x14, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:23 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101000)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000080)={"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"})
syz_open_pts(r2, 0x1)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))

[ 1042.788012][T15722] binder: undelivered TRANSACTION_ERROR: 29189
18:33:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000500000000000000002560b700fff0ffff04040000000000000a00000006"])

18:33:23 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000074708a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

18:33:23 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x15, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1042.962650][ T2772] binder: 2771:2772 transaction failed 29201/-22, size -2549729598434705384-8357212777111033060 line 3147
18:33:23 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x403, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x9, {0x1, 0x7, 0x3, 0x80000001, 0xffffffffffff20ab, 0x401}, 0x8000, 0x8}, 0xe)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f00000000c0)={0x5, 0x1, 0x2, 0xfffffffffffff5d2})
ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000100))

18:33:23 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xe00})

18:33:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000201000000000000002560b700fff0ffff04040000000000000a00000006"])

[ 1043.058679][ T2844] binder_alloc: binder_alloc_mmap_handler: 2771 20001000-20004000 already mapped failed -16
18:33:23 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x16, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1043.129414][ T2772] binder: BINDER_SET_CONTEXT_MGR already set
[ 1043.170011][ T2772] binder: 2771:2772 ioctl 40046207 0 returned -16
18:33:23 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x10020)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x212100)
getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000000c0)={@empty}, &(0x7f0000000100)=0x14)
ioctl$SIOCRSACCEPT(r2, 0x89e3)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

18:33:23 executing program 4:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x42, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f00000002c0)={0x0, 0x3, @raw_data=[0x6, 0x10000, 0x9, 0x9, 0x7ff, 0x7fff, 0x100000001, 0x1, 0x0, 0x7fff, 0x0, 0x30, 0xffffffffffffffe0, 0x9, 0x7, 0x7]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x200, 0x0)
sysfs$1(0x1, &(0x7f0000000200)='/dev/kvm\x00')
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x10)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f00000000c0)='./file0\x00', r5}, 0x10)
r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0)
ioctl(r4, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r3, 0x4138ae84, &(0x7f0000000040))

[ 1043.216691][T15722] binder: undelivered TRANSACTION_ERROR: 29201
[ 1043.223834][ T2859] binder_alloc: 2771: binder_alloc_buf, no vma
[ 1043.282593][ T2859] binder: 2771:2859 transaction failed 29189/-3, size -2549729598434705384-8357212777111033060 line 3147
18:33:23 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x18, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:23 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x401, 0x3, &(0x7f00000012c0)=[{&(0x7f0000000140)="a1eecd196f87db42f6ccde374a7d9658b95d742ce886b487980f33fab1b2601c81cec077b56ea0dc6db6e1533ca36cb9a3c17002635a80dab671d776b5c7b61286d2837d6634fad352601640a74bf7820b66907994c3874dbf77105338", 0x5d, 0x6}, {&(0x7f00000001c0)="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", 0x1000, 0x6}, {&(0x7f00000011c0)="2af00f4c643bbbdb6f98cc46fee9af490e30bd694caf681d923f4f75b93636dbebbf163a3b66cc75953c6f59c0a4ae99e238c904ea11a55ab848dc8c9fce46f1e4611218b71b9e07b48faf154dcc0d3b7aa08f3e5162c5f4322d9e67b81ed07c81afd5e5a59136437d9ab06e9442bc7a143beccb442077426f6bd61b8a8f5300db7704b91f7cdc22b38d9db067553699b4bb3756fbd19a53b3c4bceedac68ddf1fe92ab3790ab8f6dff14f52f6501211e678a2574e4087c93adb2786646061c9c8fb08781f523d6fabfc99", 0xcb, 0x3}], 0x0, &(0x7f0000001340)={[{@lfs_mode='mode=lfs'}], [{@dont_hash='dont_hash'}]})
r2 = syz_open_dev$media(&(0x7f0000001380)='/dev/media#\x00', 0x0, 0x2000)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000001400)=0x2, 0x4)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))
prctl$PR_SVE_GET_VL(0x33, 0xc3c6)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x7, 0xfffffffffffff800})
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000014c0)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, r4, 0xf16, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x10)
add_key$keyring(&(0x7f00000013c0)='keyring\x00', &(0x7f0000001440)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)

18:33:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000d01000000000000002560b700fff0ffff04040000000000000a00000006"])

18:33:23 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000001800007a708a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

[ 1043.503659][ T2939] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x45a596fa)
[ 1043.514984][ T2978] binder: 2942:2978 transaction failed 29201/-22, size -2549729598334042088-8357212777111033060 line 3147
18:33:23 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x19, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:23 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xe3e})

[ 1043.587917][ T2939] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
18:33:24 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000003000000000000002560b700fff0ffff04040000000000000a00000006"])

[ 1043.646478][ T2939] F2FS-fs (loop1): Unable to read 2th superblock
[ 1043.654275][ T2978] binder_alloc: binder_alloc_mmap_handler: 2942 20001000-20004000 already mapped failed -16
[ 1043.712687][ T2944] binder: BINDER_SET_CONTEXT_MGR already set
[ 1043.722190][ T2944] binder: 2942:2944 ioctl 40046207 0 returned -16
[ 1043.735384][ T3121] binder_alloc: 2942: binder_alloc_buf, no vma
18:33:24 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x1b, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:24 executing program 4:
gettid()
getpid()
fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={0x0, <r0=>0x0})
r1 = syz_open_procfs(r0, &(0x7f0000000200)='net/protocols\x00')
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r3, 0x4138ae84, &(0x7f0000000040)=ANY=[@ANYBLOB="e652000000001333"])

[ 1043.759524][ T3121] binder: 2942:3121 transaction failed 29189/-3, size -2549729598334042088-8357212777111033060 line 3147
18:33:24 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000002708a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

18:33:24 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = msgget(0x3, 0x203)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc)
fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = getgid()
r6 = gettid()
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000340)={{0x400, r2, r3, r4, r5, 0x8, 0x6}, 0x1dd, 0xa, 0x7fffffff, 0x7, 0x9, 0x2, 0x0, r6})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r7 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, &(0x7f00000001c0)={'ah\x00'}, &(0x7f0000000200)=0x1e)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000500)='/dev/udmabuf\x00', 0x2)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={<r9=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)='/}\x00'}, 0x30)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x5, &(0x7f0000000540)=[{0x0, 0x7, 0x7, 0x643fb21d}, {0x7, 0x5, 0xd7f8}, {0x1f, 0x7f, 0x7, 0x8}, {0xe30c, 0x80000001, 0x7}, {0x2e80, 0x0, 0x4b0000000000000, 0x8}]}, 0x10)
io_setup(0x1, &(0x7f0000000300)=<r10=>0x0)
io_getevents(r10, 0x162d, 0x4, &(0x7f00000003c0)=[{}, {}, {}, {}], &(0x7f0000000440)={0x77359400})
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r9, 0x10, &(0x7f00000000c0)={0x101})
getsockopt$bt_BT_POWER(r8, 0x112, 0x9, 0x0, &(0x7f0000000040))

18:33:24 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000005000000000000002560b700fff0ffff04040000000000000a00000006"])

[ 1044.021073][ T3234] binder: 3233:3234 transaction failed 29201/-22, size -2549729600347308008-8357212777111033060 line 3147
18:33:24 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x1c, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:24 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))
r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3000000000000, 0x101200)
ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x5, 0x0, [{}, {}, {}, {}, {}]})
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x13f}}, 0x20)

[ 1044.138803][ T3234] binder: BINDER_SET_CONTEXT_MGR already set
[ 1044.201783][ T3234] binder: 3233:3234 ioctl 40046207 0 returned -16
18:33:24 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000007000000000000002560b700fff0ffff04040000000000000a00000006"])

18:33:24 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xf00})

18:33:24 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x1d, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:24 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x2})
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040)=ANY=[@ANYBLOB="efffffffffffffff"])

18:33:24 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000003708a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

18:33:24 executing program 1:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040)=0x517b883e)

[ 1044.475491][ T3425] binder: 3422:3425 transaction failed 29201/-22, size -2549729600330530792-8357212777111033060 line 3147
18:33:24 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0x200006f3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:24 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa000000000040000300000a000000000000002560b700fff0ffff04040000000000000a00000006"])

18:33:24 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = open(&(0x7f0000000000)='./file0\x00', 0xc000, 0x20)
read$FUSE(r0, &(0x7f0000000080), 0xff76)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000001080)=0xffffffffffffff4d)

[ 1044.625986][ T3473] binder_alloc: 3422: binder_alloc_buf, no vma
18:33:25 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1044.710372][ T3473] binder: 3422:3473 transaction failed 29189/-3, size -2549729600330530792-8357212777111033060 line 3147
18:33:25 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000140)=0x4)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x8080, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040)=0xffffffffffffff93)
ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000080)=0x2)

18:33:25 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000004708a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

18:33:25 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa000000000040000300000d000000000000002560b700fff0ffff04040000000000000a00000006"])

18:33:25 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x1200})

18:33:25 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f00000002c0)=""/234, 0xea}, {&(0x7f00000003c0)=""/130, 0x82}], 0x3, &(0x7f0000000480)=""/101, 0x65}, 0x10000)
setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x0, 0x4)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000000000089dccc0d1c2346509db59c1db40000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff069a7764e2f8794d75fd93ccef058372a6db582f3ba95884059bccd94b18032b481226a49aea6656e5241fdc76f3aeb034e842c8000000000000000000000000002df5a4accfdbbaf0789383f8357b84c9e7a94ebf931feba67a4bd6d1c290e7cf66cd0c1a9cdabe79688c99df295f07cf68abab20a707cd1b890276ff13de4b7c43b54031236dd540ff6d338b71c8e4a5f0f1a4879fbb47a4a7cb3e8f87669b345f50e7f5e15712225a7237d7b065b44a4bf82c456c2bbc768725035eb9bbc42aee7c3e1cd74b78b580d82c18aa045decee41955fe7c0610294ba18eb2389e12090ec0c3b23139338886cbc5090f8384eb4c6ce42"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

[ 1045.068592][ T3688] binder_alloc_mmap_handler: 2 callbacks suppressed
[ 1045.068608][ T3688] binder_alloc: binder_alloc_mmap_handler: 3676 20001000-20004000 already mapped failed -16
18:33:25 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$BLKPG(r2, 0x1269, &(0x7f0000001080)={0x3, 0x100000001, 0x1000, &(0x7f0000000080)="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"})
ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f00000010c0)={0x5, {0x7, 0x80000001, 0x4f342484}})

[ 1045.114460][ T3677] binder: BINDER_SET_CONTEXT_MGR already set
18:33:25 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000081000000000000002560b700fff0ffff04040000000000000a00000006"])

[ 1045.189575][ T3621] could not allocate digest TFM handle crc32-generic
[ 1045.196567][ T3677] binder: 3676:3677 ioctl 40046207 0 returned -16
18:33:25 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:25 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup2(r0, r0)
setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000000)=0x35)

[ 1045.306213][ T3752] binder_alloc: 3676: binder_alloc_buf, no vma
18:33:25 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000005708a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

18:33:25 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))
fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64IPIN\x00', &(0x7f0000000080)='securitynodev\x00', 0xe, 0x1)

18:33:25 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000002000000000000002560b700fff0ffff04040000000000000a00000006"])

[ 1045.565538][ T3792] could not allocate digest TFM handle crc32-generic
18:33:25 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x1280})

18:33:26 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

[ 1045.612794][ T3792] could not allocate digest TFM handle crc32-generic
[ 1045.631430][ T3945] binder_alloc: binder_alloc_mmap_handler: 3937 20001000-20004000 already mapped failed -16
[ 1045.709123][ T3938] binder: BINDER_SET_CONTEXT_MGR already set
18:33:26 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1045.775739][ T3938] binder: 3937:3938 ioctl 40046207 0 returned -16
[ 1045.810083][ T3956] binder_alloc: 3937: binder_alloc_buf, no vma
18:33:26 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x60002)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={<r3=>0x0}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={r3, 0x40}, &(0x7f0000000140)=0x8)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))

18:33:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000003000000000000002560b700fff0ffff04040000000000000a00000006"])

18:33:26 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000006708a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

18:33:26 executing program 1:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x6, 0x1f}, {0x7, 0x81}]}, 0x14, 0x4000)
rseq(&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2, 0x9, 0xffffffff, 0x1}, 0x1}, 0x20, 0x0, 0x0)
r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x1, 0x200180)
write$eventfd(r0, &(0x7f0000000140)=0x400, 0x8)

[ 1046.079755][ T4134] binder_alloc: binder_alloc_mmap_handler: 4107 20001000-20004000 already mapped failed -16
[ 1046.110113][ T4118] binder: BINDER_SET_CONTEXT_MGR already set
18:33:26 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x1800})

[ 1046.132780][ T4134] binder_alloc: 4107: binder_alloc_buf, no vma
[ 1046.145788][ T4021] could not allocate digest TFM handle crc32-generic
[ 1046.149987][ T4118] binder: 4107:4118 ioctl 40046207 0 returned -16
18:33:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000005000000000000002560b700fff0ffff04040000000000000a00000006"])

[ 1046.178445][ T3036] binder_release_work: 10 callbacks suppressed
[ 1046.178453][ T3036] binder: undelivered TRANSACTION_ERROR: 29201
[ 1046.222503][ T3036] binder: undelivered TRANSACTION_ERROR: 29189
18:33:26 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\xc0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:26 executing program 1:
r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x2a4000)
getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000040))

18:33:26 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000007708a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

18:33:26 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0xfffffffffffffffd, 0x10000)
ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f00000001c0)=""/99)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x5, 0x5, 0x5, 0xffffffffffffffbe, 0x9})
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
r5 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x0, 0x0)
ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000140)=0x1)
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

18:33:26 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040)=0x6e)

[ 1046.393330][ T4226] binder_alloc: binder_alloc_mmap_handler: 4214 20001000-20004000 already mapped failed -16
[ 1046.419722][ T4221] binder: BINDER_SET_CONTEXT_MGR already set
[ 1046.481178][ T3480] binder: undelivered TRANSACTION_ERROR: 29201
[ 1046.488501][ T4221] binder: 4214:4221 ioctl 40046207 0 returned -16
18:33:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000007000000000000002560b700fff0ffff04040000000000000a00000006"])

18:33:26 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000012708a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

[ 1046.554680][ T4195] could not allocate digest TFM handle crc32-genericÀ
18:33:26 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x2000})

18:33:27 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:27 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
pwritev(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)="daf26234890f7e6a584809bbaf5e5fe55c43f33106ae24a3cf2645e517573d95d8f094073442cdd8db56ae2da2d77e0aa187fd0f6a63fe1d9191ec18f64ff0b915e4181893fcba92df70c536759ce4dd64f97678db7cfa4870cf2b06b716b8cf3caf311ab19ea8f3a137a208621f2a8a7651036a610358297a5f8dd921f48f998bf39540d319acdb58571488f351ef8be412c4e3107ea3297bb5ca40c6d9a62ee96e3153a6b261698934ab4cda1d79b8500b31fc3d125ee4e491219842b34ad7896ebede5c0650a8bdc3e127dd53f794f7638a2353d2fbabbb8db2089bd5", 0xde}, {&(0x7f0000000340)="7de6a9b863c0be2d86deb5a3c92b8640575f7397e5e59afb08f06adb9edc91715c6338cadde7460b2afd43976e8a3284", 0x30}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="942d8bd0574869eed71ca64508ded7887a7e82039898d2cecaab584c3de465267b9b815cf48fe835ca5215a27ed01f9865167fea4edf6a68238cff450aae966bacfb3ad7763dcfd0caa7a2a5a637dd6c864bee78b179a682a6bf36527ab088f75534bcda13c575877dfa7479f09259cd274ee08b082b3eaaba909abe48c403fc256bd4b5f47349cb1aa2dd3f2c301b7a1a364877de92b1a41c9bb3753bac4cc783dd9f975642f8582e9fdb6797807a4551e111951e00eb6afa6ecc1a32f06b956230fea03adc57da7f6426561cb6b4b91063d64dd490ac146d74503dc96088c460292adadd9142192dfb0ec82380b1070883", 0xf2}, {&(0x7f0000001480)="a1b5b9db86bd09cea0a5edbe9765f49ccfe9fcc0f948d63d27f0b178f8f495e9bdbd8d9faf6f70ceb7cd6322241bba10442ed554631cb6c993035f8b1b3a135083705db404d6d106b7dd58ae528b62cdb277d27d3b37954161784d90a4c454dfc5731152f8a3ba96f07e888631a79a57c73eed0f7474064c10a161f69779b2bce149386e072f7b1f3a2c3393484d08642d5020fe81ec5d7e8fcb28cb8681f2981748a55ff9b00a5888b8fb8e39d4cc7e9d6ac564a5813380a1963150ea334068c9e9e878bdf1a13944879280e8b6", 0xce}, {&(0x7f0000001580)="5e5ed5ee0462e257d509bfad86eae5be92a9", 0x12}, {&(0x7f00000015c0)="c4413b76a04769ae53818cbcbe58a8cdea890505cb39410cc12550e85853657de3a0baf3b2f5b9badab1b28732f4d2c9d5e6d96ce0fe1dfaa6b97fb9f0d4d91bfd4b1de621f41e03641f672d2d9face8fca0aa27e7c626d47dc8de9e99906e828cbfbe7193253884a50bdd71df1cb4582216f2af62e0e4c72911d7afa2388307616b1d530d7a1b751b9c48b4", 0x8c}, {&(0x7f0000001680)="3dac996d79f80608343f332a96099968c0b2eab2371cfc77f46d41a417138a83a9ae4c3fd3924a12329ce8cf9574adfec6f70b14fb7824065ef73068e8134d019e564235f53f467cb28546251f11849bf7fce30899eb650cc44606dd5066e3ec36e2349311afe16074be25c3bc18ee70ad4d27e554fa7494627b5e2f8aac4c086eb9f55cb691d78fe18de53231d8590c1e0997d5cc88a9d8d863041ea816f82ecd14631bff4593064fd8db9c1d81a1c1ecfcc5516fce11fdbd3482105a3855fb2f38b4ffd6f684cb6bd8f5cb7b9aa1f0e9b15d286e8810f000b20e0af8cc949f36a60d71c67a1761d05347c0974d66d9bd26c3bbdf6ef946", 0xf8}, {&(0x7f0000001780)="fad4709c815a45885ccfcc056fb15ed85ad554f99c690b6366d19c1d22c3458461ffeb6db51e8a46ee11c238378a45f1b202cc186154b066299782e4d574ff4e5fa112afe493085884628b1ce95a3dbda3793a0bf1bc3447c0be7b70ed16094d85122f86f9a1440c85699083debf81284f16bf6d1368561d60c6a5f72e69d8ec75e3bb9adbce2bdcf20e1f81f686fb92a7d5e9a5fc13c642ad5744cbab5c5f2a50f7967ddb3f9eab2e071c72dc19412ded0721d3ead00758ebae7f2d4901d3eb39faf370a524ce549a5b2e7c97e8a3f215ba8567e1c070732b9f1d60331eed65b18ad4436fda72b662f4a8ca1db22602f7634c321282d76000", 0xf9}, {&(0x7f0000001880)="d13b8106cef38c1f2faea4002f9bde8bf3ed92e3b2eba849b77fa5626f7dc3eb08d3d0c506877500e19909b68b4d97c2f1a08b", 0x33}], 0xa, 0x1a)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={<r3=>0x0, @multicast2, @multicast2}, &(0x7f0000000100)=0xc)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x5c, 0x2e, 0x10, 0x70bd29, 0x25dfdbfd, {0x0, r3, {0x5, 0xf}, {0x0, 0x1}, {0x5, 0x2}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x2e}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x800}]}, 0x5c}}, 0x4040000)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400203)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, &(0x7f0000000040))

[ 1046.706904][ T4332] binder_alloc: binder_alloc_mmap_handler: 4317 20001000-20004000 already mapped failed -16
[ 1046.756964][ T4318] binder: BINDER_SET_CONTEXT_MGR already set
[ 1046.785187][ T4318] binder: 4317:4318 ioctl 40046207 0 returned -16
18:33:27 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa000000000040000300000a000000000000002560b700fff0ffff04040000000000000a00000006"])

[ 1046.814896][ T3036] binder: undelivered TRANSACTION_ERROR: 29201
18:33:27 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffff81, 0x101000)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x4, 0x70, 0x5, 0x3, 0x1, 0x3f, 0x0, 0x401, 0x3200, 0xf, 0x4, 0xeb, 0x20, 0x5, 0x1708, 0x81, 0x4, 0x4, 0x37a4000, 0x9, 0x4, 0x100, 0x40000000, 0x9, 0x40, 0xed0, 0x1f, 0x6, 0x10000, 0x10000000000, 0x401, 0x80000001, 0xfff, 0x8, 0xfffffffffffffffa, 0x4, 0xffffffffffffffff, 0x7f, 0x0, 0xfffffffffffffff7, 0x0, @perf_config_ext={0xe2c, 0xcc5}, 0x20, 0x10001, 0x6, 0x7, 0xffffffffffffff80, 0x8, 0x8})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x208482)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000040))

18:33:27 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000048708a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

18:33:27 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:27 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x3e0e})

[ 1047.011302][ T4537] binder_alloc: binder_alloc_mmap_handler: 4527 20001000-20004000 already mapped failed -16
18:33:27 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20202, 0x0)
setsockopt$inet6_dccp_buf(r4, 0x21, 0xe, &(0x7f00000002c0)="349ace6c820125bec5c6d21d53558e9257283da1348021d4475f9f6b3d10bf2e51c702b2f6369a614a3d1caf7d8e5af63bf04050c294c457415c4542ddf31dd56e46ea8e103e566fbdbed324a41c515f49b6b04156e570c8084468c0686e69838582d94a2d0790efdcd6b87ac0ff7f6c3acff03225235b7f5d1dfcc2043ac9b0671674fb2d3afb1c2cee792cf3013741f2d0799e59378cf8f6df864130f4634fee111529f645abb39798a61fcea5fe58dd78cf0f2eda1d116920e22dc139c2a496c5054053168ea553c645587fc08b4b52da7d5a", 0xd4)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68)

18:33:27 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40c41, 0x0)
getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000080)=""/207, &(0x7f0000000180)=0xcf)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000040))

18:33:27 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa000000000040000300000d000000000000002560b700fff0ffff04040000000000000a00000006"])

18:33:27 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1047.117432][ T4529] binder: BINDER_SET_CONTEXT_MGR already set
[ 1047.182486][ T4529] binder: 4527:4529 ioctl 40046207 0 returned -16
[ 1047.182556][ T4554] binder_alloc: 4527: binder_alloc_buf, no vma
18:33:27 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r0, 0x2, &(0x7f0000000080)="2d72d7e52c2a19b1499499754c692b5ea363871c7f1dab59dcb5c513a7799a16bab35d8bd7877e289779e876d2b8e3a910d59d4be9b94b6e353dc1fe7560e965610f92be497af49c7a62ecc53149cf3ec3c716c548d9a6eda7666703a19cdd63256e892209a1ea54172d06bf200023a0509f5d7a9ae4aea44ccce1454b067fd1a1df7300c35695501817c03b72da800e519d7a44c4ec1a855ec3532264e8635f4456c635ad44467a2615e498405d495827cdde7c3beaa6a6f96823a2b268f75072cb656bd44c17f14b47cf27a5e19776c2601079abd2f3aa6c54b756da")
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))
r2 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VT_RELDISP(r2, 0x5605)

[ 1047.291521][ T4554] binder_transaction: 9 callbacks suppressed
[ 1047.291539][ T4554] binder: 4527:4554 transaction failed 29189/-3, size -2549729599172902888-8357212777111033060 line 3147
[ 1047.294551][    T5] binder: undelivered TRANSACTION_ERROR: 29201
18:33:27 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000000050000000000002560b700fff0ffff04040000000000000a00000006"])

18:33:27 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\xc0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1047.343341][    T5] binder: undelivered TRANSACTION_ERROR: 29189
18:33:27 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000001800004c708a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

18:33:27 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x113, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r3}}, 0xc)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x8, 0x14, 0x1, 0xffffffffffffff9c})

[ 1047.515260][ T4722] binder: 4721:4722 transaction failed 29201/-22, size -2549729599105794024-8357212777111033060 line 3147
18:33:27 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x3f00})

18:33:28 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\xff\xff\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1047.610734][ T4778] binder_alloc: binder_alloc_mmap_handler: 4721 20001000-20004000 already mapped failed -16
18:33:28 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7ffffffb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x40000000000001, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))

[ 1047.668564][ T4722] binder: BINDER_SET_CONTEXT_MGR already set
[ 1047.696701][ T4722] binder: 4721:4722 ioctl 40046207 0 returned -16
[ 1047.696758][ T4783] binder_alloc: 4721: binder_alloc_buf, no vma
18:33:28 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0)
accept$netrom(r3, &(0x7f0000000140)={{}, [@default, @remote, @remote, @rose, @null, @null, @rose, @default]}, &(0x7f00000000c0)=0x48)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

18:33:28 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa00000000004000030000cdd11800000000002560b700fff0ffff04040000000000000a00000006"])

18:33:28 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8040, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x8, <r2=>0x0, 0x2, 0xff})
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0xd99a, r2, 0x10000, 0x40})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setreuid(0x0, r4)
getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000000040))

[ 1047.751222][ T3480] binder: undelivered TRANSACTION_ERROR: 29201
[ 1047.827945][ T4783] binder: 4721:4783 transaction failed 29189/-3, size -2549729599105794024-8357212777111033060 line 3147
18:33:28 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000060708a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

18:33:28 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1001, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))

[ 1047.935386][ T4785] could not allocate digest TFM handle crc32-genericÿÿþ
[ 1047.962177][ T3480] binder: undelivered TRANSACTION_ERROR: 29189
18:33:28 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000040000000002560b700fff0ffff04040000000000000a00000006"])

18:33:28 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:28 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x4000})

[ 1048.143593][ T4961] binder: 4957:4961 transaction failed 29201/-22, size -2549729598770249704-8357212777111033060 line 3147
18:33:28 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x44c000)
setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000014, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r2, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x198}}, {{&(0x7f0000000400)=@sco, 0x80, &(0x7f0000000a80), 0x0, &(0x7f0000000c40)}}], 0x2, 0xfffffffffffffffd)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000000040))

[ 1048.204947][ T5011] binder_alloc: binder_alloc_mmap_handler: 4957 20001000-20004000 already mapped failed -16
18:33:28 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000008000080000000002560b700fff0ffff04040000000000000a00000006"])

[ 1048.271336][ T4961] binder: BINDER_SET_CONTEXT_MGR already set
[ 1048.317216][ T4961] binder: 4957:4961 ioctl 40046207 0 returned -16
[ 1048.340950][ T3480] binder: undelivered TRANSACTION_ERROR: 29201
18:33:28 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
fcntl$addseals(r1, 0x409, 0x8)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x200, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2004c090}, 0x20040000)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
readv(r0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/162, 0xa2}], 0x1)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

[ 1048.358467][ T5011] binder: 4957:5011 transaction failed 29189/-22, size -2549729598770249704-8357212777111033060 line 2994
18:33:28 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:28 executing program 1:
r0 = socket$l2tp(0x18, 0x1, 0x1)
bind(r0, &(0x7f0000000080)=@in6={0xa, 0x4e21, 0x1, @mcast1, 0xff}, 0x80)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x10000)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x7)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000000040))
ioctl$void(r1, 0x5451)

[ 1048.463771][ T3480] binder: undelivered TRANSACTION_ERROR: 29189
18:33:28 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000068708a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

18:33:28 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa000000000040000300001fffffff000000002560b700fff0ffff04040000000000000a00000006"])

18:33:28 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x8012})

18:33:28 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:29 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x42e180, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r2, r3, 0xd, 0x2}, 0x10)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))

[ 1048.667870][ T5176] binder: 5166:5176 transaction failed 29201/-22, size -2549729598636031976-8357212777111033060 line 3147
[ 1048.742594][ T5235] binder_alloc: binder_alloc_mmap_handler: 5166 20001000-20004000 already mapped failed -16
18:33:29 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4005fd)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))

18:33:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001020000000000002560b700fff0ffff04040000000000000a00000006"])

[ 1048.789364][ T5176] binder: BINDER_SET_CONTEXT_MGR already set
18:33:29 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1048.842920][ T5176] binder: 5166:5176 ioctl 40046207 0 returned -16
18:33:29 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYRES64=0x0, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYRES32=r2, @ANYRES32=r2], @ANYPTR64, @ANYRES16=r3, @ANYRESDEC=r0, @ANYRES32=r2, @ANYRESHEX=r0, @ANYBLOB="04a0287607f586a7a33ae97d442e2a243ae96b8880a555c24122e4a3beccc8e3326eb291c4363e33d7db8ad67696f020b93a05eb800ecc722770c87b880fae03fe76eae009f00aa2c8d7a9689c09361ed3741a207f4a9095c428062a01c7e0363392e86797d24b21dff05f5d4c3ce696000f7e1c9e488a6cad0b403d47e738cc47d0aa3e42525ad13583a9c66cf08574d2d16ad5d73d481cf468a41bd80f735c07ae1092d262d5ba7aae7a7e2abf78efd4edb546e8bd03f60691ad528213661b536a81229f03420bdc7ee5123ccec01b5e7923d828efe55a795a", @ANYRES16=r0, @ANYRESOCT=0x0], @ANYBLOB="0d7cf04a88932f1f008a27e95ec24e60ed5503cbfc0bbc9c283b571de4031aa955c32debbcab62a5222f945f7965da8ec4ab0b48d45b8c6a9763c0f33ae55f0eb3391cc2a9b2bf03d4b462f21a6eda0cd2ea58943e3e2160ad6f85759f8f8f1af28b509d2d00612870b749046a769d8a600da0c90d5561a146e415e1c0992f3ab120f06f0edbb749e288daf25e3ec8c663c677f813f547a551cad7ea664d6030f2b7810370418e9cbc4b0271ffa0e8fc4eea26ceb9dc17c46aae15cacad2a4b44608dcbd51409b7830f557e69bbe7a7b9c6a86"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))
ioctl$RTC_AIE_ON(r0, 0x7001)

[ 1048.896367][ T5261] binder: 5166:5261 transaction failed 29189/-22, size -2549729598636031976-8357212777111033060 line 2994
18:33:29 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x208200, 0x0)
getsockopt$nfc_llcp(r2, 0x118, 0x0, &(0x7f0000000080)=""/66, 0x42)

18:33:29 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000001800006c708a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

18:33:29 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa00000000004000030000010d0000000000002560b700fff0ffff04040000000000000a00000006"])

[ 1049.095525][ T5346] binder: 5345:5346 transaction failed 29201/-22, size -2549729598568923112-8357212777111033060 line 3147
18:33:29 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f0000000840)=[{&(0x7f00000000c0)=""/12, 0xc}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f00000002c0)=""/48, 0x30}, {0x0}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000000340)=""/90, 0x5a}, {&(0x7f0000000680)=""/229, 0xe5}, {&(0x7f0000000780)=""/111, 0x6f}], 0x8, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x4)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
unshare(0x40000000)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000040))

18:33:29 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x8402})

[ 1049.256871][ T5442] binder_alloc: binder_alloc_mmap_handler: 5345 20001000-20004000 already mapped failed -16
[ 1049.319959][ T5346] binder: BINDER_SET_CONTEXT_MGR already set
[ 1049.340260][ T5346] binder: 5345:5346 ioctl 40046207 0 returned -16
[ 1049.357207][ T5503] binder_alloc: 5345: binder_alloc_buf, no vma
[ 1049.364506][ T5503] binder: 5345:5503 transaction failed 29189/-3, size -2549729598568923112-8357212777111033060 line 3147
[ 1049.375712][ T5452] IPVS: ftp: loaded support on port[0] = 21
18:33:29 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\xff\xff\xff\x8d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:29 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000074708a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

[ 1049.671798][ T5596] binder: 5591:5596 transaction failed 29201/-22, size -2549729598434705384-8357212777111033060 line 3147
18:33:30 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xf0ff})

[ 1049.753003][ T5614] binder: BINDER_SET_CONTEXT_MGR already set
[ 1049.836699][ T5578] could not allocate digest TFM handle crc32-genericÿÿÿ�
[ 1049.848308][ T5615] binder_alloc: 5591: binder_alloc_buf, no vma
18:33:30 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000d00000000002560b700fff0ffff04040000000000000a00000006"])

[ 1049.897561][ T5614] binder: 5591:5614 ioctl 40046207 0 returned -16
[ 1049.951979][ T5452] IPVS: ftp: loaded support on port[0] = 21
18:33:30 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\xc0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:30 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x50100, 0x0)
setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000000c0)=0x7, 0x4)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r3, 0x4138ae84, &(0x7f0000000040))

18:33:30 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0)
ioctl$TCGETA(r2, 0x5405, &(0x7f0000000080))
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x55, 0x3, 0x1, {0xffff, 0x4822c1ae}, {0x80, 0xff}, @cond=[{0x8, 0x9, 0x10001, 0x5, 0x99, 0x1}, {0x8, 0x0, 0x2, 0xbb78, 0xf4b6, 0xbc}]})
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))

18:33:30 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000001800007a708a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

[ 1050.190593][ T5661] binder_alloc_mmap_handler: 1 callbacks suppressed
[ 1050.190611][ T5661] binder_alloc: binder_alloc_mmap_handler: 5644 20001000-20004000 already mapped failed -16
18:33:30 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x7, 0x101000)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10800, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000040)=0xfffffffffffffde6)

18:33:30 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001ffff80000000002560b700fff0ffff04040000000000000a00000006"])

18:33:30 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\xfe\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1050.321292][ T5645] binder: BINDER_SET_CONTEXT_MGR already set
[ 1050.332040][ T5645] binder: 5644:5645 ioctl 40046207 0 returned -16
[ 1050.352677][ T5823] binder_alloc: 5644: binder_alloc_buf, no vma
18:33:30 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xfeff})

18:33:30 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000180000007f8a9ddce4140f0cbec8fa73"], 0x0, 0x0, 0x0})

18:33:30 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040850000a90000000400fa000000000040000300000100000000000000e30e3e2e1660b700fff0ffff04"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

18:33:30 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x8000, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000006c0), &(0x7f0000000700)=0xc)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dlm_plock\x00', 0x109000, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000840)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bind$bt_l2cap(r2, &(0x7f0000000600)={0x1f, 0x0, {0x7, 0x8f, 0x7fff, 0x8000, 0x5}, 0x4, 0x401}, 0xe)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x1fd, 0x2, 0xf000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r4 = add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="2d7ca7002600207fabfd01e11192a9af8b19b01045f78df3f8caf21b947b1ab670f215aacd56d160a9224a7321d214a033c57fe6ae1f6f15cce466f4c18d5094de30fd298eb869551cbd058111971a8b8dace5476f1ef9308dcdefd66c8b82b8ca8cefeecdf1a8fc368d0eaf4156c57eeb94681f857ce9669e9aa4c84f96bebc1894d9fc2629319aa760f87bfe3747b84a11203d7c6a39f6555b86371f361c1b48b80557f731a5a75b0a3c6fc2d632da738ffe68e0eb900653bff8c66a50bf9f54370df787953a4dde187e12d4c7e6450c9d3414c243719e850da52fb3987c26faf766ddcf51969b3c", 0xe9, 0xfffffffffffffffb)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000001c0)={r4, 0x1f, 0x9ef9}, &(0x7f0000000200)=ANY=[@ANYBLOB="656e633d6f61657020686173683d736861332d3531322d63650000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000"], &(0x7f0000000280)="8657f01a00c9a59f74a93417c473a85dcd4f53c9fdaf14d324301bd892b657068e7b7b2b786d2698e86a4d132bedd0c2010391c221685bceb0c512f2e174c62cca4f25d017cf831b07d4bb32d7321638357038c9926d42e39d665c542c97d796ccbfd99c57649d3ac12ebce8e27788a160d9d4a3077d1e7b94874f2716d31b2b8482cab09a33b352bb78ad9ee31295a3c46c7612da0c9cb9197ba1d683ba14f19d7db7209bb003bdb2b09c461e08be870cad466275417fd820bce73d9b74b464", &(0x7f0000000340)=""/234)
syz_open_dev$swradio(&(0x7f0000000640)='/dev/swradio#\x00', 0x1, 0x2)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r5, 0x112, 0x9, 0x0, &(0x7f0000000040))

18:33:30 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x8d\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:30 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000010000002560b700fff0ffff04040000000000000a00000006"])

[ 1050.584430][ T5877] binder_alloc: binder_alloc_mmap_handler: 5858 20001000-20004000 already mapped failed -16
[ 1050.618977][ T5859] binder: BINDER_SET_CONTEXT_MGR already set
[ 1050.627145][ T5877] binder_alloc: 5858: binder_alloc_buf, no vma
18:33:31 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = dup3(r0, r0, 0x80000)
ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000001080))
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x1000)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))

[ 1050.666701][ T5859] binder: 5858:5859 ioctl 40046207 0 returned -16
18:33:31 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddc0a00000000000000"], 0x0, 0x0, 0x0})

18:33:31 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xff01})

18:33:31 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
write$capi20(r1, &(0x7f0000000080)={0x10, 0xfffffffffffffc01, 0x8, 0x83, 0x8, 0x5}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000100)=0xb3)

[ 1050.867530][ T6016] binder_alloc: 6015: binder_alloc_buf size -2549729600380862424 failed, no address space
[ 1050.898875][ T6016] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
18:33:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001400000010000002560b700fff0ffff04040000000000000a00000006"])

[ 1050.939735][ T5935] could not allocate digest TFM handle crc32-generic�ÿÿÿ
[ 1050.998918][ T6096] binder_alloc: binder_alloc_mmap_handler: 6015 20001000-20004000 already mapped failed -16
18:33:31 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\xf0\xff\xff\xff\x7f\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:31 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0)
setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000140)='/dev/kvm\x00', 0x9)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

[ 1051.083722][ T6016] binder: BINDER_SET_CONTEXT_MGR already set
[ 1051.083729][ T6096] binder_alloc: 6015: binder_alloc_buf, no vma
[ 1051.103213][ T6016] binder: 6015:6016 ioctl 40046207 0 returned -16
18:33:31 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x80)
ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000080)={0x2, 0xfed3, 0x2})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f00000001c0)={0x6, 0x5, 0x40, 0x5b1d, 0x8, 0x7})
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x20000, 0x0)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100))
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000040))

18:33:31 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddcffe0f50500000000"], 0x0, 0x0, 0x0})

18:33:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001800000010000002560b700fff0ffff04040000000000000a00000006"])

18:33:31 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xff0f})

18:33:31 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x7f\xff\xff\xff\xf0\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1051.326003][ T6211] binder_alloc: 6209: binder_alloc_buf size -2549729600280862440 failed, no address space
18:33:31 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))

[ 1051.395325][ T6211] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1051.461194][ T6260] binder_alloc: binder_alloc_mmap_handler: 6209 20001000-20004000 already mapped failed -16
18:33:31 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\xff\xff\xfe\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1051.520585][ T6211] binder: BINDER_SET_CONTEXT_MGR already set
18:33:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000020000002560b700fff0ffff04040000000000000a00000006"])

18:33:31 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80, 0x0)
write$FUSE_GETXATTR(r2, &(0x7f0000000080)={0x18, 0x0, 0x7, {0x8b36}}, 0x18)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1051.561719][ T6211] binder: 6209:6211 ioctl 40046207 0 returned -16
[ 1051.618059][ T3480] binder_release_work: 12 callbacks suppressed
[ 1051.618067][ T3480] binder: undelivered TRANSACTION_ERROR: 29201
18:33:32 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddcffffc06ff2862300"], 0x0, 0x0, 0x0})

18:33:32 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0)
r4 = semget$private(0x0, 0x7, 0x46)
semctl$SETVAL(r4, 0x2, 0x10, &(0x7f00000000c0)=0x8000)

18:33:32 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xfff0})

18:33:32 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:32 executing program 1:
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5, 0x204081)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)={0x3, 0xddb, 0x40})
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000040))

18:33:32 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001800000080000002560b700fff0ffff04040000000000000a00000006"])

[ 1051.886112][ T6448] binder_alloc: 6446: binder_alloc_buf size -2539729600380862440 failed, no address space
18:33:32 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000080)=0xa9)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x42000, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00000000c0)={<r3=>0x0, 0x1000, "e22a3d0574a12e04206d4c2a7d0fe49a507db326b0d42ddc79e75ae2f2790d845c36e86cb9f0ae34f13d6d4c469b5800fe10c7ed0c0df97a194c901485d531ffe78b28bbe9d0922fbf4f2a7eba99e408f519bc04d8f5dec92e9ed838cd879817aae540d0d36ba1137cfd2806fe7d101661e2db6c5460e9c2626a9dad5fc7ad5a126a57c77f8eea4c3230d503f7cfd0178f643b77fd6b21644ff41974402c15048cc588c6518b83c271b93d343b951ac0e7c3a91520f3f4c6e696f3a42cf22bec798b5821a59c5a396865c2ce4febe3122cbe46d09c5c758fbb44ba5409e93cf7596553918c4eeea694c94cc30db663d67cc383538b46402e8a764933c714270d4c8f8c1851681d9f479b939d20678759140a5ad9d001badc228e9b23cfa71ca7b28eab6e52490c8e00292fabc3c6f099497da8b44204420f5862017a7402654bc4272dacff2048845db76c6a57d8eb37de9135866fabf561a2ae82183143fef2f9b59ca9903012b5df27436ff5d9a174b35328a70429f8b6a8b54a3cddd9d8119d6c8d465613d70ddf116bb0711c40ca3a175a5a005d11b36e717520c25b409f74233057fd6f63215d7eaf47b8151ed2dff1e707c679034b9b1385bd121a3f1a2e196d66fff6c336e4879148c3227bd1ba7552fb2c3ade58ee99cae1d10c793e5284a488a2cd8fa15a617722778235b118ef1184534ad80f3b1e3c7012cfa4465615508aa49be82ffaa8854885a66b871bc73d2136055b06258ab69286cc0e03648f94ffb61b66f445273b647029368765b510c2f7dd01019a870a9bf086213bf05996061e211380dcf460b0dff38b67dc6fc96092cac00f371aeab48252b8cd611c97a9289eb015ceeed9ff2815dd4f6faddc4c7ebe0c8b9d390935e8035efdaa9bc0e198b25deaf3160190d836dad721645a9954508ef15a6f25f086a31b275663d2432a938cd10298f030b9a76436b93127084cdb3892bf36b77ccf512dc8b720c2ba73678d7f48c31a833a2230a0fc0a86c1c6e8b926a08134f10f707c8d3b123cd28917861089c39cc2b0a22308a28dfca1f4c432de9674d6b84e8d87c176a1b66210d60d49c8785377062c8f8c09ff2a707d9961cfc5ed4db13bb193e51274e9e3be913fc36be758057d6ade3ac2aa5f315c2baa2139007b444dac2190edb9469c11e68396cae74a1851545c9efe74ad224c5e4f9ef7252728c40601d8f768881bc9af6a07abcab80b1b0aabccd7bcf568aae27ad3a46a12a9a645bc8fde1b1c2e958a4c0cb4cce5ccfcd99ca77b534f02e6dac2b64cf59076933d819ffe4f1159ba9dd4eba9c7da7dc971dafab88bea42ef20f42e7f85b12173b89a5eec55dab8395e9118b903a6ac5670c5e01cdfc8c6e36c1e36349300f85d1334ce0d8a51ddd59ef699380c32a60d4f3bb7a5966c3d2f9acaf481fee45f1df141982cd3e5fa1157e5905d45bb8ece6d5f66b35da87cdc1321a85d4d3565924546bea57666296741cf4556573611d4b6824e5a656f151d9de92d5d36c82a12f6a831bf673302feebcd0583b022f3c7825d3a80fe3d9ae6e9f5bfb407575ce7f69ab3b34efe51bd358e49467c6eacce308d1ca0358abe2025b58f91615d3ed72a0d105c6cbbac8310d6c0fadfce82d2ddcc2245eedd130b978ce793bf68d5521d148d0012596e23f95b9eabaca66f691ea55e0fc8afa3247bac0b06937c5dcf823e3c16503512e0a035c31d5984da365007090bc8a2587745ea2e52c3398eafb46d707cddc160794156124c3624d82e38ea56336723a62d639051095dfcb8492977921b78d997d0bc6ccd8d712e9e078127fbc954dc31d549eaa5c714c28bdffb36178675181ce46a926a6c77d17088c3e643c92c382d12206770c78b4846825144bd609737f82ca4ae73f1faf878cc36ff4abfbb0827c630c96379596971804f44d4db36614d71f433be37077f5e897782a4b3debf7ceb1f045437942ea95e6215a0908918494f60e82176ea66daa9b664cfbbbb9d17d72e320fc076241b2ef46eb9db8c8aeefa8f2d56ceddd7ba29afbb1201ae34a6cd739853c4d2d56a766bf79cc697e479538e8357d6bf9f98677b4e16f80cb8e0f55a73d92d2f022b1ff3e0e52527f738e3c3529efa379035674b5be8c3cbdfa73b3bf8a208ddadb716b0d8e9a544c1de43024f3919e3dac6292323301d05bac9b7c5ebec523f92a156a1df1451a30d15906761a3a86dc018fba5dc53f74e3bfb8802a0c7fe6d6f2f84bc91f4cd1b090dcb09ba9f7cf9315596bd08ea53cdd46793f6982f71d559156a0ece2c1da4b51a7eacc026a935e737dee0b5f73284b33e60939d900b6d6d11a3d036281b190826bdbb655aab6da50260e0b06f05ff9e36e6398d46573e1479d151e72336eebe9c03a533b5c0e369eb9e8c2feeb8182671d8ef4ee25e263abfb0c4626f61fffff2db5bbddfcf327fa49a038797d15156049e091d15b933fd76c2758baa82b4b83cf1cc1a6db9fbb1d508ec1525d4023b03cf6faae55e630ce3537bd95cfa1d3a03a197daa34fae4d17d5bb0ee7b155e8e559ef0e55cd9641aa48685f3a8053189b69ec880845d619c9f25eabebddf3fc845a7a95b367e2fb6fcc69155830b9afb43dde15edfd22469e676e13c55bf1c137715c5bc3fd79b27a7e0d4f24622d64a523ffc426a1a0736197920a9780fad58b636952883b6bc0c73315f83c6c4aa197a8f3fd0a08dddef5d48a13ff5553461b47252b2ce6f3b42753a49e11063df8cada94ac7e404fb7e1afd19ca6df3f1584cdcd08ad0f2a54ea3be2600b241a6697650bad86e9dd84c3373368154e207ceb11dfaff473fddbdd06afa41821ea9aa564872a93ff200ea72d2744466620cc906a23dbdbe3dd17e0c976a6f1b15ef13592fcc679c3361d36920f8edb0a2fc4077639ea9e762519c382cd58d47f95ce3b73dc47e4146c2ea825977e574639330ef5ddc6b537470239bdd344d013d42ce047ac198febf71763bb2752d9240f60eaf036811dcbaad95c4e3f58b80a1dcf043ac09574a7d83fdb9ea23d6d291df71c6b0eec17653442ca0277a65b3b8d0f66f2c50cfaf5fb83bb6c0f68f08aa846299a49bafb77780c63b2667ee11b5f61122401c4a72618494ae55c8ff2dfdba48bc173c41e549a6522f07dfeba4b945a94318ef4b1e2f76133cbf0da9290d858c62a039cb9f457ee28936d5c842f574639a6763a5b6219003cbeb71fa918bf2081dff2cd82d21499e0f8154b7b3424bdcf359ed99cbe4dc9b66cf8655f0ad8d0c925e1de249ffef6cdfbf57ff0da0a229f633418bad1f6c9b3c709642a26d59a6d4491f1011812e3f11db042010bfe7624da104a80b1e91c0a25d3f819d34ed7fb4ff29277f2f7da6bde95844df75e130182cbd9d1cc18c1af185c270a0ef20229f44816620ae8838844fddcbdc142b86009f31631ee7efe3429ad62834f371169e0877974ddf06b4f24826898a9395c8308af37b71ebe1674d1c52bdad2dc96d26e7fc4c221d892c8573480f2204481c78b869966bec7fbfdb4fa147eb42020bdfd83162f1ca2be9548c32c46dd316f01ba280da497d34cc2b2a76db1d775728e5ed1a3214e164054e05cc925e6108afb168b710dd28af648b294bc2abb4aa98a9c3e4be9c613380499cd048a79706f36d5d268c80123c22d01630bcd1157f5337f13288cb8acd3cf636b228614c07afff46f25f12127b9101862f6a922d88ee148b6ec2e5dc9c9e681ccc4aa77c4846af7166b56ae102e6d7a6c708e7cbb668a3b6d6a50f6e5db437c7031a6a0dd2e76063c2d2bcf3990a81fc35522f7f450ae3dcfa94e79f0b8bc076e7d76587b185916f917646cf5532677765c8ca709244db98acd0262f71a65b3297e35f7a2e1d19203f46b9b60b4306a94a2aa0f1760ecd6779dff9b0092fd745a56500cc38713830a7e0b2aa05e2ba4b0b4b7ee235b0a4a7424851da336fe28318888103987978f2379ca39986025b0704fa9008a9c4c6edaaac5a737ace6c6b04f07bf15dedb1890f02de0284603f573609462d2379a39728c5d1ff04c569b5de73b2558909baaba6e8ba5b8e9928782143a4635425af2c1f1f806ba07b22664de2bcedfa7c47f2252ab7c267f36dfe72cce83488eaa4bd63a0b54a4de2963f95d4b989e5bcabe53273b46c099a34de19a577b3b4a7307f83d463db22aae5962c561216d192abf884f5b3796fbde8f008750c52f77674ca9710a5c466032bbfbc353ebbb0ba718935c991a23a632c2db348c28faccd619a866fe531ee8f92e475263ecc87869dfeda98b7e9935bcabd7dea5881e2d679afc7e5bfc95ef83ae0d485df14ba764ba822c4243341708c3540b5b65a70bf51753e59aa3cc60b85a31626fed825228d30841698da33560e0db2f0328e0d3dc5e2fbf0dd09ebd8fc721b93dc5d2d3f1c2471623306cb3fefd080fbfb097e6ee6d4edbbda1e50dc9ef50a8fb4bd13158e563cfc383fc03ba47e28e9975776a4302cb0b19beb42b1803e371a63ff27e647db49e3c2f17d2df8d6fc76ea28ed2dadde6e0e0e81a8ffd0e6f67af18f63a3ee22ce95e6df7c34310500be739b04e62e1abb7ad24007d7daa54abff1549996e7eb7ff201a8ab4da9f2b89400e5245471482e4537ff66723a3f481d4695670d21247d43537e4c608bc846a4a583d77b539893b237c36553d2a294d3621a0774361b260ea5150bc66fa0a99f067169861ee88848e3a5e9acb32418a03fe47789ef90bbe81fb58fccb4cfddb71874e6e28a07008dc6a1fa1aabb362b3bc6aff356e6dd3aeaad2fca62407bd9a86121dc1e65e6cc34c7676adc2f86911ff9382f7512e6191455020bbd3a3ef9a986e81da032902877fb2fe2c96a96e94eaf545383d4f2f8eb4205b8208b6478d478768cb7d60911be2d7b6d6d3d75aaecc632297d954c718599d1ac178023aaade55a502d00d425ef1975aae9a7ef7bd9c6e074ce84335633d4a4365c64d6222e47a4f4e545b8c254c4f8b318d4fc7622df6a1c039b3cbe2a131899b5043e4cfd0fb4ca77ca508d12e762921f6a81e58bb77168363e89e472b97714e53db27a12659808c3edd3bdbc31b1827861bd5d85ab72bdb0f44b219fb2e0905ca666ceb2fdca1d92475f0a129fe4512b129f60c83affb84d164afc86769fdc4c8199dcb359f3178e536538377f9cb2787088d9caf3088597a191290f68df6f2e303be1f7c7042e46c8f781bce0b5ba65ef9caee72bd810f1a974f9b51a3190c3a49999122e8230b1b293ffc98aff94804245a23da64c674ffeed2d422ae0796a754c345b84ac2197cb700a136ba69b9c67281ef57e16b23690cf98a8eb1c2ff1cc3688f15131247799904d15e8ffbd3a40d57d6121c508719ae4f5f16b96d841879b6a18b0b145faea7b1ca644a315a8256bed65f34af2ada4b3aefb0aaaa5a36f75691f3c06d349e2f537087336f4bf39e9b18f5cff07867bedf3d747e68c21a4ebfe6cd7f0bad233d99ea1951a043451283a37096d9c30d91b9541f666ec0eaf7ce9b806b1b4f1d7516d79bccbdd0775cfcffd53d1377940b3508a873c03ac82097940e08b69741f2520636d02aaa170bb3fe03e40a3275287797c14dd800762ca0e35359901b062b15063d5bbdb4bf9d0d460c121d9168eed7dadf85562d5fc1bed035f836bcd35cb21f4a995bca9f1076c2d93b321337ee48560157664d5da61d2a5dd9cb6e5c6b94694d7cee69988b6843845a4b4f96a927b8f1aa01f499fb8a9f5d8ad7dde7aaba2226dd90315b6318830"}, &(0x7f0000000040)=0x1008)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000001100)={r3, 0x5}, 0x8)

18:33:32 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1051.966860][ T6448] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1052.070187][ T6537] binder_alloc: binder_alloc_mmap_handler: 6446 20001000-20004000 already mapped failed -16
[ 1052.140215][ T6448] binder: BINDER_SET_CONTEXT_MGR already set
[ 1052.177129][ T6448] binder: 6446:6448 ioctl 40046207 0 returned -16
[ 1052.177701][ T6618] binder_alloc: 6446: binder_alloc_buf, no vma
18:33:32 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa00000000004000030000010000000d0000002560b700fff0ffff04040000000000000a00000006"])

18:33:32 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x8000000000400202)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))
bind$x25(r0, &(0x7f0000000000)={0x9, @null='               \x00'}, 0x12)

18:33:32 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1052.242548][    T5] binder: undelivered TRANSACTION_ERROR: 29189
[ 1052.248876][    T5] binder: undelivered TRANSACTION_ERROR: 29201
18:33:32 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$inet(0x2, 0xa, 0x2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000"])

18:33:32 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce414020cbec8fa73"], 0x0, 0x0, 0x0})

18:33:32 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xfffe})

[ 1052.438950][ T6693] binder_transaction: 10 callbacks suppressed
[ 1052.438968][ T6693] binder: 6691:6693 transaction failed 29201/-22, size -2549729600380862440-8357212777110181092 line 3147
18:33:32 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffff, 0x2000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000080)=""/87)

18:33:32 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001010000400000002560b700fff0ffff04040000000000000a00000006"])

18:33:32 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1052.650233][ T6815] binder_alloc: binder_alloc_mmap_handler: 6691 20001000-20004000 already mapped failed -16
18:33:33 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0)
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x400, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0xffffdffffffffffd, 0x0)
write$P9_RLCREATE(r1, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x1, 0x3, 0x5}, 0x6}}, 0x18)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2000000000004, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000040))

18:33:33 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1052.743755][ T6693] binder: BINDER_SET_CONTEXT_MGR already set
18:33:33 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1})
ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000200)={0x0, 0x7, 0x5, &(0x7f00000001c0)=0x3})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
getpeername$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000180)=0x10)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)=ANY=[])
r5 = socket(0x10, 0x3, 0xc)
write(r5, &(0x7f00000008c0)="130000001000ffdde200f49ff60f050000230a009d000000110ac53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db75411543e1226408e88cac1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e5de7e4f28bca763acd06f40ad03226af55e3129849ae3c726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025722c962d916c00000000", 0xb1)
ioctl$KVM_SET_MSRS(r3, 0x4138ae84, &(0x7f0000000040))
openat$random(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x0, 0x0)

18:33:33 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001080000800000002560b700fff0ffff04040000000000000a00000006"])

[ 1052.800062][ T3480] binder: undelivered TRANSACTION_ERROR: 29201
[ 1052.807152][ T6693] binder: 6691:6693 ioctl 40046207 0 returned -16
18:33:33 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce414030cbec8fa73"], 0x0, 0x0, 0x0})

18:33:33 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x2a85e})

18:33:33 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0xfffffffffffffffd, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x10002, 0x0)
getsockopt$ax25_int(r2, 0x101, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

[ 1052.965861][ T6902] netlink: 137 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1052.990722][ T6924] binder: 6923:6924 transaction failed 29201/-22, size -2549729600380862440-8357212777110246628 line 3147
18:33:33 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\xff\xff\xff\x8d\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:33 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001fffffdfd0000002560b700fff0ffff04040000000000000a00000006"])

[ 1053.082994][ T6928] binder_alloc: binder_alloc_mmap_handler: 6923 20001000-20004000 already mapped failed -16
[ 1053.143298][ T6924] binder_alloc: 6923: binder_alloc_buf, no vma
18:33:33 executing program 1:
r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000180)=0x7)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000280)=0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0)
r3 = socket(0x1b, 0x6, 0x4)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000040))
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f00000002c0)=0xfffffffffffffffd)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000080)={<r4=>0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000000)=0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000200)={r4, 0x36c, "71a47cb54496d63f1d7fbe7e977f9fef11aa22441ca0b48b5b08818ad4948ce4530a17545cf1841d7d7c4555d3ae0c3347ed9c9762bf903481ce1820c0fea0efdfd1b284e2c0e86883908fa3"}, &(0x7f00000001c0)=0x54)

[ 1053.185242][ T6924] binder: 6923:6924 transaction failed 29189/-3, size -2549729600380862440-8357212777110246628 line 3147
18:33:33 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\xc0\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1053.271615][ T3036] binder: undelivered TRANSACTION_ERROR: 29201
[ 1053.280511][ T3036] binder: undelivered TRANSACTION_ERROR: 29189
18:33:33 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce414040cbec8fa73"], 0x0, 0x0, 0x0})

18:33:33 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))
r2 = dup(r1)
ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x2ab, 0x6, 0x79ae, 0x9, 0x14, 0x7, 0x3ff, 0x6, 0xe6, 0x401, 0x400, 0x8})
ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000080))

18:33:33 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa00000000004000030000010080ffff0000002560b700fff0ffff04040000000000000a00000006"])

[ 1053.477957][ T7100] binder: 7095:7100 transaction failed 29201/-22, size -2549729600380862440-8357212777110312164 line 3147
[ 1053.569750][ T7153] binder_alloc: binder_alloc_mmap_handler: 7095 20001000-20004000 already mapped failed -16
18:33:34 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))
r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)="ddc1e0e6e903211fc8e497b3903668a9d8ac65f258df637820e4bdcb4482920dfb703a96ae6b3cd995d2762ec92dc3153eb2f47988495771c528390cf7bd972380264070e54e5bf876c9b46b263aa0275931f8dcf9604c5b09ad6fddb5e66307b2836fee4a46427d854ed84e30d75fbeece557a1faba52abdadc4891e6232f62a6", 0x81, 0xfffffffffffffffb)
r5 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$negate(0xd, r4, 0x5, r5)

18:33:34 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, &(0x7f0000000040))
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x8)

18:33:34 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:34 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x2a85f})

[ 1053.623923][ T7100] binder: BINDER_SET_CONTEXT_MGR already set
[ 1053.630841][ T7100] binder: 7095:7100 ioctl 40046207 0 returned -16
[ 1053.641257][ T7165] binder_alloc: 7095: binder_alloc_buf, no vma
[ 1053.647839][ T7165] binder: 7095:7165 transaction failed 29189/-3, size -2549729600380862440-8357212777110312164 line 3147
[ 1053.660090][    T5] binder: undelivered TRANSACTION_ERROR: 29201
[ 1053.705720][    T5] binder: undelivered TRANSACTION_ERROR: 29189
18:33:34 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x2)
ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000080)={0x7, "92227770b026ad750880014be2bae8cbee8037c854bf145af1cc8e0d92c101b1", 0x3, 0x5, 0x101, 0xff000e, 0x2})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)

18:33:34 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce414050cbec8fa73"], 0x0, 0x0, 0x0})

18:33:34 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001fdfdffff0000002560b700fff0ffff04040000000000000a00000006"])

18:33:34 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1053.922569][ T7246] binder: 7245:7246 transaction failed 29201/-22, size -2549729600380862440-8357212777110377700 line 3147
18:33:34 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x80002)
r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x2000)
r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10000)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x80000, 0x0)
ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x9)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f00000001c0)=0xffffffffffffff79)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x40000, 0x0)

[ 1054.019016][ T7331] binder_alloc: binder_alloc_mmap_handler: 7245 20001000-20004000 already mapped failed -16
18:33:34 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000))
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

[ 1054.149403][ T7246] binder: BINDER_SET_CONTEXT_MGR already set
[ 1054.165854][ T7246] binder: 7245:7246 ioctl 40046207 0 returned -16
18:33:34 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000200000000002560b700fff0ffff04040000000000000a00000006"])

18:33:34 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1054.199131][ T7380] binder_alloc: 7245: binder_alloc_buf, no vma
[ 1054.232873][    T5] binder: undelivered TRANSACTION_ERROR: 29201
18:33:34 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x40000, 0x0)
ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000080)=[0x400, 0x7fffffff])
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x522e)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))

[ 1054.241099][ T7380] binder: 7245:7380 transaction failed 29189/-3, size -2549729600380862440-8357212777110377700 line 3147
18:33:34 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x2a860})

[ 1054.309347][    T5] binder: undelivered TRANSACTION_ERROR: 29189
18:33:34 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce414060cbec8fa73"], 0x0, 0x0, 0x0})

18:33:34 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\xc0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:34 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000d00000000002560b700fff0ffff04040000000000000a00000006"])

18:33:34 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x6)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8000, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000140)={0x8, ""/8})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000180)=0x5f7bd7ed6ec6b14b)
r3 = fcntl$dupfd(r0, 0x406, r0)
connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @reserved}, 0x10)

[ 1054.530561][ T7520] binder: 7509:7520 transaction failed 29201/-22, size -2549729600380862440-8357212777110443236 line 3147
[ 1054.670131][ T7591] binder_alloc: binder_alloc_mmap_handler: 7509 20001000-20004000 already mapped failed -16
18:33:35 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000140)={0x5, 0x0, [{0xb76, 0x0, 0x3}, {0xbf7, 0x0, 0x4}, {0x3fb, 0x0, 0x9}, {0x30a, 0x0, 0x5}, {0xaff, 0x0, 0x9}]})

18:33:35 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003ac0)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000003bc0)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x2040a00}, 0xc, &(0x7f0000003b80)={&(0x7f0000003b00)={0x78, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x4}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr="ac4a0e45d2a580cf11d3718d701f17f0"}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x18}}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x70fb}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5b93}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000004}, 0x840)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x800, 0x0)
ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000080))
recvmmsg(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/4096, 0x1000}], 0x4}, 0x401}, {{&(0x7f0000001280)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001300)=""/64, 0x40}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x2, &(0x7f0000002380)=""/81, 0x51}, 0x775c}, {{&(0x7f0000002400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002480)=""/83, 0x53}], 0x1}, 0x1}, {{&(0x7f0000002540)=@rc, 0x80, &(0x7f0000003680)=[{&(0x7f00000025c0)=""/143, 0x8f}, {&(0x7f0000002680)=""/4096, 0x1000}], 0x2, &(0x7f00000036c0)=""/90, 0x5a}, 0x7fffffff}, {{&(0x7f0000003740)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000003800)=[{&(0x7f00000037c0)=""/44, 0x2c}], 0x1, &(0x7f0000003840)=""/137, 0x89}, 0x2}], 0x5, 0x100, 0x0)

18:33:35 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1054.713497][ T7520] binder: BINDER_SET_CONTEXT_MGR already set
[ 1054.751985][ T7520] binder: 7509:7520 ioctl 40046207 0 returned -16
18:33:35 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x2a861})

18:33:35 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa000000000040000300000100000d000000002560b700fff0ffff04040000000000000a00000006"])

[ 1054.850587][ T7645] binder_alloc: 7509: binder_alloc_buf, no vma
18:33:35 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1054.911158][ T7645] binder: 7509:7645 transaction failed 29189/-3, size -2549729600380862440-8357212777110443236 line 3147
18:33:35 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce414070cbec8fa73"], 0x0, 0x0, 0x0})

18:33:35 executing program 4:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x20300, 0x0)
ioctl$BLKIOOPT(r0, 0x1279, &(0x7f00000000c0))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r3, 0x4138ae84, &(0x7f0000000040))

[ 1055.147756][ T7764] binder: 7763:7764 transaction failed 29201/-22, size -2549729600380862440-8357212777110508772 line 3147
18:33:35 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1055.289406][ T7803] binder_alloc: binder_alloc_mmap_handler: 7763 20001000-20004000 already mapped failed -16
18:33:35 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa000000000040000300000100ffff800000002560b700fff0ffff04040000000000000a00000006"])

18:33:35 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\xc0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1055.364556][ T7764] binder: BINDER_SET_CONTEXT_MGR already set
[ 1055.393975][ T7764] binder: 7763:7764 ioctl 40046207 0 returned -16
[ 1055.436711][ T7890] binder_alloc: 7763: binder_alloc_buf, no vma
18:33:35 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce414080cbec8fa73"], 0x0, 0x0, 0x0})

18:33:35 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\xff\xff\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1055.673078][ T8030] binder_alloc: binder_alloc_mmap_handler: 8015 20001000-20004000 already mapped failed -16
18:33:36 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = request_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='user{\x00', 0x0)
keyctl$get_keyring_id(0x0, r1, 0x4)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00')
ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000c0ddd9950000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"])
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000040))

18:33:36 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000100002560b700fff0ffff04040000000000000a00000006"])

18:33:36 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x2a862})

[ 1055.730750][ T8020] binder: BINDER_SET_CONTEXT_MGR already set
[ 1055.762964][ T8020] binder: 8015:8020 ioctl 40046207 0 returned -16
[ 1055.763471][ T8040] binder_alloc: 8015: binder_alloc_buf, no vma
18:33:36 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:36 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x404000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000140)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
socket$inet6(0xa, 0x80800, 0x20)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0x12)
ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f00000001c0))
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40200, 0x0)
write$9p(r5, &(0x7f00000000c0)="c890451db7d19567535dcc5d8fa7f3704415fb113d4e4b17c4e9f7b7e1de92f4329acd", 0x23)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0)
socket$bt_bnep(0x1f, 0x3, 0x4)

18:33:36 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:36 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce414090cbec8fa73"], 0x0, 0x0, 0x0})

18:33:36 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x800, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))

18:33:36 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001004000000100002560b700fff0ffff04040000000000000a00000006"])

18:33:36 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f00000000c0)={0x1, 0x0, {0x2, 0x8, 0x301f, 0x6, 0xa, 0x7, 0x0, 0x3}})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xcca)
mknod(&(0x7f0000000000)='./file0\x00', 0x4, 0x4)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000040))

[ 1056.131051][ T8233] binder_alloc: binder_alloc_mmap_handler: 8203 20001000-20004000 already mapped failed -16
18:33:36 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1056.200161][ T8205] binder: BINDER_SET_CONTEXT_MGR already set
18:33:36 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x2a863})

[ 1056.252291][ T8205] binder: 8203:8205 ioctl 40046207 0 returned -16
18:33:36 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffffb}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0xc004}, 0x44004)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

[ 1056.302250][ T8287] binder_alloc: 8203: binder_alloc_buf, no vma
[ 1056.311643][ T8285] Unknown ioctl -1067952636
[ 1056.345806][ T8292] Unknown ioctl -1067952636
18:33:36 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001008000000100002560b700fff0ffff04040000000000000a00000006"])

18:33:36 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:36 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140a0cbec8fa73"], 0x0, 0x0, 0x0})

18:33:36 executing program 1:
r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0)
getsockopt(r0, 0x61, 0x1ff, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=0x1000)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x20000, 0x0)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0xffff)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_dev$cec(&(0x7f0000001200)='/dev/cec#\x00', 0x0, 0x2)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x8, 0x0)
getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000000040))
syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000001280)='/dev/kvm\x00', 0x105000, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40, 0x0)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000080)={0x8, 0x5, 0x81, 0x80, 0x5, 0x2, 0x8})
openat$vim2m(0xffffffffffffff9c, &(0x7f0000001240)='/dev/video35\x00', 0x2, 0x0)

[ 1056.610024][ T8359] binder_alloc: binder_alloc_mmap_handler: 8340 20001000-20004000 already mapped failed -16
18:33:37 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:37 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000200002560b700fff0ffff04040000000000000a00000006"])

18:33:37 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000080)={0x5, 0x7f, 0xcd, 0x1ff, 0x80, 0x7})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000040))

[ 1056.697331][ T8342] binder: BINDER_SET_CONTEXT_MGR already set
[ 1056.724490][ T8342] binder: 8340:8342 ioctl 40046207 0 returned -16
18:33:37 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x2a864})

[ 1056.826549][ T3036] binder_release_work: 8 callbacks suppressed
[ 1056.826557][ T3036] binder: undelivered TRANSACTION_ERROR: 29201
18:33:37 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140b0cbec8fa73"], 0x0, 0x0, 0x0})

18:33:37 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x10001, 0x88000)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000000c0)=0x7ff, 0x4)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYPTR64])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000140)={0x7, 0xffffffff, 0x0, 0x2, 0x8, 0x1, 0x5, 0x7, <r5=>0x0}, &(0x7f0000000180)=0x20)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000002c0)={r5, 0xde, "666ec1736d8630e474793e05e8834d3e331be5ec5e37fce678219f3f3e944ed5d4d407d57263cfde30e02a230a03ad9da9ff2013e513f489ed861cf25d6cf6d9508a7a21b74f0829572d69c2bb749fbd2a890af05c3ca0f1227eb0cfdbe7130e84bbe0737793432ec83b5724f459a4ccdc5cbdbb30c49ddd9570c8276393038162152f69068cba9792abc8bf03b17e71bd3292aad1986ce8cbc03f2704954e2dbf32ee02233270bd24ddc61ef0423e53e7f5e14edd75d048fcbe2716d169b21c9fdceab97d8c5e905e7a50642fdbe082a8628c89d7d9a74ca152f2da8597"}, &(0x7f00000001c0)=0xe6)

18:33:37 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\xff\xff\xff\x8d\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:37 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = dup2(r0, r1)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r1, r3})
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))

[ 1057.025931][ T8541] binder_alloc: binder_alloc_mmap_handler: 8535 20001000-20004000 already mapped failed -16
18:33:37 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001008000000800002560b700fff0ffff04040000000000000a00000006"])

[ 1057.098515][ T8539] binder: BINDER_SET_CONTEXT_MGR already set
18:33:37 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\xc0\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1057.140479][ T8539] binder: 8535:8539 ioctl 40046207 0 returned -16
18:33:37 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140c0cbec8fa73"], 0x0, 0x0, 0x0})

[ 1057.222002][ T3036] binder: undelivered TRANSACTION_ERROR: 29201
18:33:37 executing program 1:
r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x63, 0xa02)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080))
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000040))

18:33:37 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000d00002560b700fff0ffff04040000000000000a00000006"])

18:33:37 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x2a865})

18:33:37 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='task\x00')
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe4, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}]}, @TIPC_NLA_BEARER={0xa0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'teql0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1edf}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40001}, 0x80)

[ 1057.397204][ T8721] binder_alloc: binder_alloc_mmap_handler: 8704 20001000-20004000 already mapped failed -16
18:33:37 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\xfe\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1057.442692][ T8713] binder: BINDER_SET_CONTEXT_MGR already set
[ 1057.474097][ T8713] binder: 8704:8713 ioctl 40046207 0 returned -16
[ 1057.573661][ T8782] binder_alloc: 8704: binder_alloc_buf, no vma
18:33:38 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x8d\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1057.615654][ T8782] binder_transaction: 8 callbacks suppressed
[ 1057.615672][ T8782] binder: 8704:8782 transaction failed 29189/-3, size -2549729600380862440-8357212777110836452 line 3147
[ 1057.632222][    T5] binder: undelivered TRANSACTION_ERROR: 29201
18:33:38 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_read_part_table(0x8, 0x9, &(0x7f0000001740)=[{&(0x7f0000000140)="31f16f107b7b571dbd666118b9ce3818c1fad1610b7895a311797ce999191ceea8a6d64ab9a94d110f24dd00e7c6dae94d097d1175a60e0d89ef2e87ed766b24fa42952b62245a0e2b1c10169a5b5f99687864375c51bbdfde4d56d46a796a8f0a56f5127d63656c07eeb9d6d7aff71213f93fc99782c252ee0b77d5f4dd198424d43a99a0417a4c1ae0b1ef4b82b054b3d8120169b016c5c0d38cd0821f204199784a00c86ebd6b291349cf31e556c11e96dc44564c58a1a3392fed5cbcf54573917ce848898a511e6937af12679ea67e8928", 0xd3, 0x216d}, {&(0x7f00000000c0)="e849ae7440eb29a1cd50a5318e919748b9cd97ab5c2cff43f21378f1f0e230606be0", 0x22, 0x3}, {&(0x7f00000002c0)="dac7dd57c65a3d2f6891e00cd03dc0d8272fb2b97584697d9c123397881a3b4c3a5c1a0cef415fdac49d4fefd5882eb2e082a25d09660de179fb1a4de606c3d14b124b99b002cbddd9e66daf1b5c4699d44c31059463d88f7b7f54d79c3343cadc7e1d8cea233f4d3e97dfc858e25c9346972bf8bc847458f63327df53bd206f486ee069e4cbcd2ea3fe458c8aa2c999a7b6dd9c258e08ad395ea3344fa25ad2957590af73e390a3dc220cefdd44f636f8c34d08a273fdc1b37fdac7a1e233e1c96acb9cc3f0de1f0a75dd9808a3e01b361add6de82e8324d038285ac10929830aaddc9653487ee11a37b097735ce7c5ab16c3", 0xf3, 0x20}, {&(0x7f00000003c0)="d2fc4740b03a8ec359944d0048cac7b626da762e6e2a2c0d32a6dce591f41bb7e6788a622b1a093851a8a7eac2696002009d6311135159399a74d875e68211e02f8ba7824e6825ce638ca2571e012e45d3a42d5f742584e40a78639f0ecb557d2b96b364573bad49be639bf1507551b6e215c8e7db56fb0726033f2ef6e56d2982022f6da36a742b", 0x88, 0x1f}, {&(0x7f0000000480)="facc2ef8389c68565b37f228e59371eeaffdd7c4c4c7f33680eea215b2c3da91a15e3ab0e3cc6419ec4e20ae32171f6d40a9623de67c24df526a10d5adbfa45e23a486d0d5e1a091a10a6343dfaf77384a1d2d3616", 0x55, 0x1e205408}, {&(0x7f0000000500)="7120ee43de3aac187269c07b9381b05fe11953eebf609253b625ad4e458b2adf1e55e9e4ea6a7b2015899373da46b0feb065c84cd861db1f994483631a1db7f89ec3f916bdd703897390f09836a94c2ca16ab4b645e0ead1e22da50c91df3ee0737ebbfa405807ffc4f78265579baa2ca3970726527d4a3e47a8cc30efd726bbeb6fda930af423cd27e13803830ddad01e610343f562ea4985de04cc45d443b2b1b410f045c77d92ec63d859c14e963e19cb174044d14c6a213810d89695afcd3549d224", 0xc4, 0x5}, {&(0x7f0000000600)="226a895f0ed46b3ab9ce6fb687593a8db88efb7001cad3f0fa68df38a854aa6143fc8d13617e92edf4b13ec56b5ecfad61896b3a1a02e3c4e413b3f05bc11818377bdd9bcd1f44b564d38dad90a91645e287835ff4551712163cc702055178d92d290c2c0c12001e53", 0x69, 0x3}, {&(0x7f0000000680)="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", 0x1000, 0x100000000}, {&(0x7f0000001680)="2c04bed6071a0c8eefce8bc591bdbf12f395fc4e3e7b0bda35d6427e7523ad4fa60b147b63b348e6208aca422d692ccaf3352e9c875853616f0e1a7d162924d4ddabddfa4eb6707f2aed17675218d0933e3006c8b6dde092193558a1c49cabff125ddb34c0576f7aae2e7f764c15589559d1ac0825fcfe32b7f6bae56af668d08ccbcce489305cdc7105a7e979c9284a1f2619b18653e2b83d67f2e433", 0x9d, 0x465c}])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040)=ANY=[@ANYBLOB="cfa22ff2ce35faf2"])
r4 = dup3(r0, r2, 0x80000)
connect$caif(r4, &(0x7f0000000000)=@dbg={0x25, 0x6, 0x7ff}, 0x18)

18:33:38 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40200, 0x0)
r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x6, 0x80000)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))

[ 1057.742927][    T5] binder: undelivered TRANSACTION_ERROR: 29189
18:33:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000100004000002560b700fff0ffff04040000000000000a00000006"])

18:33:38 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\xf0\xff\xff\xff\x7f\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:38 executing program 1:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x20)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x800, 0x1}, 0x2)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
connect$netrom(r0, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @null]}, 0x48)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000040))

18:33:38 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140d0cbec8fa73"], 0x0, 0x0, 0x0})

[ 1057.974376][ T8935] binder: 8934:8935 transaction failed 29201/-22, size -2549729600380862440-8357212777110901988 line 3147
18:33:38 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x2a866})

18:33:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000800008000002560b700fff0ffff04040000000000000a00000006"])

18:33:38 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x7f\xff\xff\xff\xf0\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1058.091757][ T8990] binder_alloc: binder_alloc_mmap_handler: 8934 20001000-20004000 already mapped failed -16
18:33:38 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xad2, 0x2)
write$P9_RRENAMEAT(r2, &(0x7f0000000100)={0x7, 0x4b, 0x1}, 0x7)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0)

18:33:38 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffff9c, 0x861b, &(0x7f00000000c0)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)=ANY=[@ANYBLOB="050800001f00000000010040050000a90000000000fa000000000040505b031055518f59cfbf0000000000002560bf00fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

[ 1058.238851][ T8935] binder_alloc: 8934: binder_alloc_buf, no vma
[ 1058.240861][ T9033] binder: BINDER_SET_CONTEXT_MGR already set
[ 1058.304733][ T8935] binder: 8934:8935 transaction failed 29189/-3, size -2549729600380862440-8357212777110901988 line 3147
[ 1058.323119][ T9033] binder: 8934:9033 ioctl 40046207 0 returned -16
[ 1058.328729][ T7825] binder: undelivered TRANSACTION_ERROR: 29201
18:33:38 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x4e21, @rand_addr=0xffff}, {0x0, @broadcast}, 0x40, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip_vti0\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x20000000000007, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xab, 0x0}}], 0x1, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00')
socket$caif_seqpacket(0x25, 0x5, 0x4)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0)}}, 0x20)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x628040, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x0, 0x0)
r3 = memfd_create(&(0x7f0000000180)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setlease(r3, 0x400, 0x0)
fcntl$setown(r3, 0x8, 0x0)
execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r4 = socket$inet6(0xa, 0x2, 0xffffffffffffffff)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev, 0x8006}, 0x1c)
sendmmsg(r4, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="5c1400d650249d4e1cfd7fb5a7413606e1976beffb83a342bf6647f1ab82c64ce71ba31c1d7214ab145622", 0x2b}], 0x1, &(0x7f0000000640)=[{0xa0, 0x117, 0x26, "87263b9a93fb043f42e52cd55ff5438d0411a1b05605c2686d97989af1807957d859737d7a3a4dabaf6a3637432c3c956c52e566a5303667d4f9240df8e7951c5fdc39e909ec01db87f70db2c8865e027a17bb11198cf938f52e7597d424e22eb6a2e2dab2ead10c0d920f7b61b3e584263ec4c667d77573371ae50dd8e89ca5fe34e8c4f0fac8398c82ceef"}, {0x100, 0x114, 0x2af, "9a16ac944d618e192f911292768d4992bb9c081aac58772d7ca34cb06cae63cf251f66ba6929ce25c333b518dcbd8116e21baca8934b2356bef1bbddbf165889ba5a8d572d63b90321547943976c1c6150ea13fc2aac55301ddbce6dd14d7e84b305ba90b3558fe2f1d48fa75786309c2e232e1cce04388eb89641a17fd7c9144429009b1dfdfe53dbf261c2961f6b96f0c39a6c089bb50d777659dc6cd20625acded0f865da0e1de833657baae21dc9f048328fc84ff13415c97d18f9fa985955b76cdd6d4e98df4c7e5cb7a8abd45f14f77bd4c6c6a3bdeeaf711eae71e722d4a06089b5f717ed5a60"}, {0x110, 0x0, 0xfff, "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"}, {0x58, 0x108, 0x101, "a51fdc152e75479452cd52f087e5c5bfbc69725c4a8af11c8b4a440b9c00397c6ea0d6583a429c268b9cc507493d02b38326a4a43ecf0f2e5b110cdb4f75704a18c99bb6e7a6"}, {0x68, 0x11f, 0x6, "fbf71370e17848a0ef2b70c353644201ba4795828545049acc39ba3126af83012a8ec0cfe8f9b0d192aab9a08cf7953b36961108e032685534cad6d7a75ce5d664dbe65887a0a455a7aa562d4a2d2f73be99d619fb6256"}, {0x48, 0x6, 0x25f, "386dba7fddc3ffecc278629ab7f494b375baa3303f7a7ce16e496fb7f3a01c0f3a0e9a950f9cf3e3e7dd127e043f1ca9cad004b78f"}, {0xb0, 0x10e, 0x100, "080a4c95f26f3f9abf5e21ca755e043c7ec40f76b7a5bb7184460f96680ea4f7c539c96897cf0881df5d181120de39b8d98afcd7c8a1c344ac0edb8398512c00093fe37a4b3725f8afead658c6052ef4c7261cb5710ad45fb4bb2d09ea1816e6dc877b62b423d471f0dd373c2d1865b69b400fc8d3879caea66ffb47e56f328bf368a86a7425e41c314a3944476f87d798bab71039df2b7f5e"}, {0x68, 0x104, 0x9a7, "7335bf89e07c89eda8fdea31c70c4a984e01efd0d6353be2bbdf9002ee051bfd9d529311853f9c87ace0c4016c9b01792ab52914329432755ed3a5c11adc22e13a94a128710428ea45ad805820728562a6b4e5885cf644"}, {0xb8, 0x7, 0x3, "6fde95d7565b0f1d3123690d41270ce43978a6105bce767e30febd2ffa4b418dd4440d168296a8447a02a2b224bafbe01b7f19385793adab0c69b527ecc6f75481afbf4fd23029be813f27bcf9dc79247ef4cc8164639da9e4e755ab5cf538adfea55adb0a1f198d5e7a2f55ce533c099930ac46aa9877a257d2268a53d46f88d62a1510d2a020b2cfb17e046e71bd63e7cfb470dee9863f9606f3ccc4eb88559cc976"}], 0x588}, 0x9}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)="410a82317c7776d384e5bb6eccaa10ac39c4bec543351936f62951611547f3a0e7375883bac00840c7156db0adfb1c6d9423e356b50cc8cf680b6f", 0x3b}, {&(0x7f0000000380)="823157ac116b488457db8dc52c0608f8c4c82c0dfce130b58b690258840e5b6a542fe7e0e2614a59a86fbfaf44559edee8eb0427f9a7b1db40c750622af4eaa1ed6f74c723fb1db4c40a23b3b77e899c37c1c1addfc8f992973c96b05775dd6e6db63e77bb27aab0c3546449c3c68c8cbcae691b13e3dd1696f7c268da27a9f6cc6202b0a93245b4f14319c41053974497ec9e5bbde8f749be6788d22f7be1cffe52f597b334e40698a823cc20bc0f94f950a597b512d1a60c36e3177a07bd22a93ecfc0e70957f680e8c0963d8b067e26e95e167b730eb4b3a4ecea9b56aedb72e333d67265343e7dffa629b444cabeb167c5cb", 0xf4}, {&(0x7f0000000c00)="f30550b04eed056b640b554cbfa34189c3d538d8cf0a87fb793ad9a58d6b9a4cc40d45838bb05dce14435c162dfccdb866f16e24e2e987fd608552cd3a73f4e689f62f1ca07346c23ae06215ba500eda460eb5252307ec0fc7c4cfaa08684b6d21dcae50d1330f9efc21996775926724efd656ea8b0f6073b3a797a3e2e79abd81061f63817ae7309acde4bb4d558c89ed71646e4198d8e5d8f017a49085ee3f5c3787ec5d3e13f6496852e77e773d012fa0521533de993109bbc449491963f434d9c9d2e24e60e3cb8ed5c9c9", 0xcd}, {&(0x7f0000000d00)="530b70d48cfc615d687f9e767cbe8d643300a0014ef4b8ba5b4c792567b0ac1f545e4c1b8e426e7c392f4753bcac9d7a44111d1f59f866c3ce2c222529b3233d3dd2eed6efe4f3f93728f6dea15c6cb8866b548f874e0d4b30b47be327bee811c397922b3ef97c07dec07c20d4f33f03d19ce7977543ffcef1006d8925bd2db5efcabd4589502041dea77486f810061aa21676c195ff8ee091f81c7cbb74b0d0c4fc6a747cd73b0863c44ea76457c31cb058d9af6f9a6bcac8e28f78854431f365f1c6cea7d719c51985d20bb4f50668cab4c2c69835837ad34865dec88c", 0xde}, {&(0x7f00000002c0)="665a3ba3", 0x4}, {&(0x7f0000000e00)="2d0b2a00c64670d0986c37026ca8bb079ebffa3b0571c313b8883d1295a9dbeda079f7f1ddadf2c0754bced8afb4a55829cb824f20ae04425577196412a28bfc5248ead5e250a7f5debce71e4b0a243d7a8b24df07f191a413ed35ea401507fbbc1fd1badb3b85ca4974b50651f7a216a275f7b7c6abb463386f2beacd13558b711913915f9acc9cc567837cc694a8587ac2f452933a277e80d043104cba0dbd8059c639dcae8b21ba407a0b328ebc85", 0xb0}], 0x6, &(0x7f0000000ec0)=[{0x58, 0x0, 0x9, "cb1cfa071a6b9daae756c174de097ff524daa64f4bbfda7ca3320f290e1e7cbb99f698cb501ab0c9ec792bbbe9950d6642ed9954a67b9b8d5bc2cf4c7680dae5ce84444a3f"}, {0xc8, 0x6, 0x9, "b62b6eb37ac4d2c7739f932d6b60a6ef56c212cd1c6faf3663dc239f2e4519d7ecbe8d7cd975ba843545466937e032dab90f70889a7e49406f13d40eee6079dd6377a32698d565a52f694c2052d79630d11bfde43c2df93fd56ef86ae5c57ddcbf1739a0f9d38a91e99bcf851ad9d5ba494202b3540b9641ec7476530fe763d97079df86ceb0d8ea3e7b410bba21fb118312be3511e187c215b1ff31b56c8f9ef09d09b37ddce9a27eefec00ecc8f3a9166af0"}], 0x120}, 0xff}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000300)="446a7694d9672abc964fc568cf67840c7034beeea1e18410c8e0af6fe335e1c6f5b6f2ff98c589ccbea4d5861a2e1a85a6da97b7", 0x34}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000000540)="4bebea2ef11e816c2c0053008ed36d05217218f525079cf39c86fcf528bd0a349ccf8205", 0x24}, {&(0x7f0000001000)="5943008524e2075d85d490df6365ad774821833510928eeca533b115faebd918ae4e2b51a61da38062b3a5c94809e6b5b8e2afc7e016078afb9905bda396225546b315dd0d32c96d3a757423b079c9d5231f8c7d5858bbc3babc629150b364527679987a84cc9062929549d99c183147066b40d84a79bbe202ba377b89b1b9a968a42d1a9a73c5651cf0e3b00a31e331d2eaf5aed68c2d355488b8ca80bf5d59c7718eff32bc5314f01760b16a45c0942293fed877cad8d5dacfa0a3cc5a2633c894ee67a2190c91cac30fbfc1271bc22e6d5cc1b2e128df06b32c529ae7376008fdf5c78d", 0xe5}, {&(0x7f0000001100)="db96d43b9ac2dcdc818d882704f881f31f7cc953208b7a27938471cb8dc618abb263ba2c269ede9fcabc2adb3c53febf974245c7f13024ddbbcf9c20f8080f8164dd9d96355ea71ab437166c98dd2b48f94f1fa8f2c88189954404321fe82213ea4167019924563ce187047ad678538ea0b895130ec04b8f2fe0c418da596de3a1984ed92042f3691ab7ac3572e6721432c890a91d261218c458724c88caead06fabb5d92ecadc69a126c2ebc89ec32e4996f2162c33f08610bd5481a334e731c18b5cbd7f", 0xc5}, {&(0x7f0000001200)="ba261af0a72831262a9ad881168391f7dc98223942dd071132e11c9e3c2df8c21b3379caa2078e6f55e6536fb48ea33a83405d55ff5e864256ea8d6c22f5504d913cee53a44fe247666dd6ae884ff1e8b1ffcc89a391f3f7d38845b4e6499fe94ac64668307a271bd7af813c4c663b6687f556a1e581ea728a1a6ef306ffd266207c9a3157d42233cc4fc7cb8753df1346b48b17fb6b4b306a6c6814cdfa6575261c41fa5bdcf357afb9c36c32eb0ab080e20c295dded5d8633198f878bc3894b0b216d4aa6946131652", 0xca}, {&(0x7f0000001300)="fa5ba2b7450953531666d5c8d792d8b304dccafa741f52639054e6697468596f5120231db704d01e910bfea3bdb9a290f60813a69c3aacd95ef8a1ee241dac71e3b0f34452a09fbd388ac3bc7474759a47cb98631d706cb3febf09cb6a5ca550f5d66067484d133e686dab6038975da197c0752479ee34e22d93dacb0fb40d2b7f4e18bf203c2010f864d35ec61f41f448e3147cafd843547b67cdc7732b120f0c7c687d392de8823d0cf1dee66e426367296ad4e4b609830d60f025b66d09da3e60da64", 0xc4}, {&(0x7f0000000580)="e67f9afec9a18b618e642f60a0cedc900f7c5e6aad33c088a04722f9fa97e7cec07388a5ba6ae5", 0x27}], 0x8, &(0x7f0000002500)=[{0xb0, 0xff, 0x5, "6d1aa8f989299c99f3634cd30eddb9ebaaf0b4e9e2a76c140fd9ceb2a1307e5e6025e77f85a1358e720fffa63f3b85a33f28d176027dc68d02aa2231db487120acb738d1c863db8537f46ab41506464199393dfd3def654ccaaaf1881285304dbd8c4c1e929bac6090f0d569f9369dce2fb481438b702d5f78872a3416b10296b741534fc390911dd03378fa9268c95f556627cd336ba84a083eda10e4"}, {0x100, 0x10e, 0x1, "1a215c8c99aee311673f07cf979bf603d0f011ad61d7325623d106a1adaa313ab6680950b7dab3228ffe2b8cf1175269e877c9c7006ca05013b07f4de1606d587f21037431f2f2e7a6d13f316cbf40001749e78f5f543ba63151467813cac34ca2ca67ce2788889cff89fc03b970fd7e2ae3ffedb8f9b7807035877f5ac465e5ad0d7bafc8cd8dfc4d8006aab48e50f9021c2edd53f9ec3ea9ed87760ee4b74c8eb91e4a83dd503149849b7035ea0a3e5f7e4c5a58ece686c2374a08040fb444db29ec0515941f25d19678775a041027cc898b8438a41ddab3dc91507d308cfa52a7bd003974fbf5df"}, {0x28, 0x117, 0x84, "1b9b8e5bde79cd1cd305db03e1ace37d901ea2de1d0c"}, {0x78, 0x115, 0x0, "5d166837e0e90a42385dbc0d9a6f8ff7ba917cc62699651ce3fbe41cc68ec14e0f4d444b1154737ae0db9c25c78be2445b9493c99139b1acfa88d13ba41e05f6b34ea7aea5ed28835455d96e45c37e0a997ab04cf880cdcfb02a57f3def591773eea"}, {0x30, 0x6, 0xd5e0, "0ed565e72029a0f5f5296be65cfc8d159c95a2ffa44c751fb9"}, {0x10, 0xbe, 0x9}, {0xf8, 0x115, 0x6ae, "1d8fd382bd181b1969f64a0cd5c92e2e4b59e1d2c1567559874c2afd14a4c60624ea8659ab5062522ccaac091a1f58796a93fb9f626842c4c769b87246c458bb3fd1992e22832b1a32faa58b77c1c3a562e5467fe3f1fffd699092282273488fde200e784717423ae7101ada4797fa8fbc8ff06114ffbb45ce15fe60ea332089d861af3f202bcee643514a4494c22cf6595582262238bcbb006a095d10c1a7ca9a5540697b53d2088722801eb68644fe83e642a5a9bd199401b7b1a09ce64f103b285b7e323735d901e231a7018590a3cadceeb93a9c9c2d717e6b57a997ca8e2247488e8120"}, {0xd8, 0x10e, 0xff, "0ebfe44d8d68a1050328d36410278f338d26a60544ca30b87e13edc8d66357e9d7ffd100e8fb1b0621f0028c46ffb5aea61e47b86f63f109501ab8f96124cdb1d978d753ad6c912f80c39847c40de0ef7978b3ebf121600e4b4708a48f48f32b74bca36d810177758be68c113af80ead66f5fac4be1aeb037e25b14df40ac00738251e9f14a1cebf1fb438b5fa748be039bf7d5b67a679450789fa56c9edba2e9ccf1d64f41c2f5190cbce18d3d84892e8b161a0f05490c1db6eeb0af33f38e83d335e75176c"}, {0x70, 0x10e, 0x3, "66bac62bafecf576510f52203093a0e18d014ef4e34e1b31bd1da9c0684f94dde716ed422db47d77c99746f639eef35f21ecd8813f2e1aa0cad942f754dbe7358374b4ac0dd0e2be7a7449eb516eaaa1407f85a773d4f5f587ac5d"}, {0x78, 0x114, 0x44, "92791abd7b751c9b1b659dcfcfbe3cae99ced7654da7ce96f7c7cd5525eef60d231064c73da26f907f873cd2321ab4b4db78ec73771ee2ff756583fff679bc899b6b6ec098bc55406944678f39b7503918a2382e7c3a5514fb2faa8d92d06e0266ce996b29"}], 0x548}, 0x5ef}], 0x3, 0x800)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000000)=0xfffffd96)
shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffb000/0x3000)=nil)
fstat(r0, &(0x7f0000000100))
getegid()
fstat(r0, &(0x7f0000000180))
r5 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2)
r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6)
getegid()

18:33:38 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\xff\xff\xfe\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1058.415395][ T3036] binder: undelivered TRANSACTION_ERROR: 29189
18:33:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa000000000040000300000100fffffdfd00002560b700fff0ffff04040000000000000a00000006"])

18:33:38 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140e0cbec8fa73"], 0x0, 0x0, 0x0})

18:33:38 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x2a867})

[ 1058.554573][ T9167] binder: 9166:9167 transaction failed 29201/-22, size -2549729600380862440-8357212777110967524 line 3147
18:33:39 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00@\x00'}})

[ 1058.679124][ T9235] binder_alloc: binder_alloc_mmap_handler: 9166 20001000-20004000 already mapped failed -16
18:33:39 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000080ffff00002560b700fff0ffff04040000000000000a00000006"])

[ 1058.760939][ T9167] binder: BINDER_SET_CONTEXT_MGR already set
[ 1058.801511][ T9167] binder: 9166:9167 ioctl 40046207 0 returned -16
[ 1058.833662][ T9265] binder_alloc: 9166: binder_alloc_buf, no vma
[ 1058.873434][    T5] binder: undelivered TRANSACTION_ERROR: 29201
[ 1058.880640][ T9265] binder: 9166:9265 transaction failed 29189/-3, size -2549729600380862440-8357212777110967524 line 3147
[ 1058.905333][ T7825] binder: undelivered TRANSACTION_ERROR: 29189
18:33:39 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce414100cbec8fa73"], 0x0, 0x0, 0x0})

18:33:39 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00@\x00'}})

18:33:39 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x34000)
ioctl$KDSKBLED(r4, 0x4b65, 0x198f)
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

18:33:39 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa000000000040000300000100fdfdffff00002560b700fff0ffff04040000000000000a00000006"])

18:33:39 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000080)={{}, [@default, @remote, @netrom, @null, @null, @null, @null, @default]}, &(0x7f0000000000)=0x48, 0x800)
setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000100)=0x7, 0x4)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000040))

[ 1059.134529][ T9376] binder: 9340:9376 transaction failed 29201/-22, size -2549729600380862440-8357212777111098596 line 3147
18:33:39 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x2a868})

[ 1059.256454][ T9386] binder_alloc: binder_alloc_mmap_handler: 9340 20001000-20004000 already mapped failed -16
18:33:39 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00@\x00'}})

18:33:39 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0xa0000, 0x40)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000018}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x230, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x40, 0x0, 0x4)

[ 1059.351437][ T9376] binder: BINDER_SET_CONTEXT_MGR already set
18:33:39 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000002000000002560b700fff0ffff04040000000000000a00000006"])

[ 1059.408458][ T9376] binder: 9340:9376 ioctl 40046207 0 returned -16
[ 1059.408512][    T5] binder: undelivered TRANSACTION_ERROR: 29201
18:33:39 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00@\x00'}})

18:33:39 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000140)={<r2=>0x0, 0xbc, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0xe}, 0x66}, @in6={0xa, 0x4e20, 0x401, @dev={0xfe, 0x80, [], 0x15}, 0xfff}, @in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, [], 0x24}, 0x6}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e23, 0xde, @loopback, 0x7}, @in6={0xa, 0x4e22, 0x3, @local, 0x2}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r2, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000000040))

18:33:39 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce414110cbec8fa73"], 0x0, 0x0, 0x0})

18:33:39 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa000000000040000300000100000d000000002560b700fff0ffff04040000000000000a00000006"])

18:33:40 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x0, 0x0, @ioapic={0x0, 0x274, 0x8000, 0x3f, 0x0, [{0x5, 0x2, 0x2, [], 0x9}, {0x0, 0xce8, 0x3, [], 0x6}, {0x2, 0x1, 0xff, [], 0x91}, {0x3d2, 0x7fffffff, 0x1ff, [], 0x5}, {0x9778, 0x8, 0x1f, [], 0x10001}, {0x9, 0x2, 0x7, [], 0x73}, {0x3, 0x6, 0x0, [], 0x8}, {0x7fffffff, 0xffffffff, 0x100, [], 0x1}, {0x3, 0xff, 0x200}, {0x2, 0x9, 0x40, [], 0x2cc000000000}, {0x6, 0x4f, 0x817, [], 0x7f}, {0x3, 0x7, 0x2}, {0x8, 0x0, 0x1f, [], 0x8}, {0x80, 0x100, 0x1000, [], 0x101}, {0x8, 0x10001, 0x0, [], 0x3cd4}, {0x2, 0x76d, 0x80}, {0x200, 0x1, 0x9, [], 0x1f2}, {0x9, 0x7b7c, 0x1d4, [], 0x7}, {0x0, 0x2, 0xfffffffffffffff7, [], 0x1}, {0x2, 0x100, 0x0, [], 0x6cdf}, {0xff, 0x6, 0x6, [], 0x8}, {0xb8f, 0x8, 0x0, [], 0x3f}, {0x1, 0x8e, 0x8, [], 0x10001}, {0x80000000, 0x1, 0x3, [], 0x1ff}]}})

[ 1059.733799][ T9581] binder: 9580:9581 transaction failed 29201/-22, size -2549729600380862440-8357212777111164132 line 3147
18:33:40 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001ff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040))
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'})
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400, 0x0)
ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000080)=0x7)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x180, 0x31)

18:33:40 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x2a869})

[ 1059.807515][ T9631] binder_alloc: binder_alloc_mmap_handler: 9580 20001000-20004000 already mapped failed -16
[ 1059.846373][ T9581] binder: BINDER_SET_CONTEXT_MGR already set
18:33:40 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00@\x00'}})

[ 1059.897177][T15722] binder: undelivered TRANSACTION_ERROR: 29201
[ 1059.904758][ T9581] binder: 9580:9581 ioctl 40046207 0 returned -16
18:33:40 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa00000000004000030000010000000d0000002560b700fff0ffff04040000000000000a00000006"])

18:33:40 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce414120cbec8fa73"], 0x0, 0x0, 0x0})

18:33:40 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
flistxattr(r0, &(0x7f0000000000)=""/1, 0x1)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000080))

18:33:40 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00\x00\x00\x00\x00@\x00'}})

[ 1060.153607][ T9737] binder: 9730:9737 transaction failed 29201/-22, size -2549729600380862440-8357212777111229668 line 3147
18:33:40 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa00000000004000030000010000ffff8000002560b700fff0ffff04040000000000000a00000006"])

[ 1060.248175][ T9737] binder: BINDER_SET_CONTEXT_MGR already set
[ 1060.287027][ T9737] binder: 9730:9737 ioctl 40046207 0 returned -16
18:33:40 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)={0x5f1, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK={0x98, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2d06}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_BEARER={0x154, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x204}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff1e5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'yam0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3ff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @remote, 0x3f}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @ipv4={[], [], @broadcast}, 0xfd1}}}}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x100000000800}, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000000040))

[ 1060.293265][ T9796] binder_alloc: 9730: binder_alloc_buf, no vma
18:33:40 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x100)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={<r5=>0x0, 0x5, 0x1, 0x6, 0x5, 0x9}, &(0x7f00000001c0)=0x14)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000200)={r5, 0x10000, 0x13, "d26612f9c5e579d37a515f6363afc3dedbe2a6"}, 0x1b)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000000000000001004082000000e0000000000040000300000100ffffffff00000000b700fff0ffff04040000000000000a0000000600000000001c4eb431e519078bb18513f6a088f035fea7ad77635335793454e104"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

18:33:40 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\xc0\x00\x00\x00\x00\x00@\x00'}})

18:33:40 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x2a86a})

[ 1060.449648][ T9796] binder: 9730:9796 transaction failed 29189/-3, size -2549729600380862440-8357212777111229668 line 3147
18:33:40 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000001002560b700fff0ffff04040000000000000a00000006"])

18:33:40 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x0, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0xffffffffffffffb1, 0x1000, 0x7, 0xc71, 0xb3, 0x0, 0xbf, 0x4, 0x8001, 0x7f, 0x0, 0x20}, {0x8, 0x7fff, 0x80000001, 0xffff, 0x2, 0x82, 0x9a, 0x77de, 0x7, 0x1, 0x100000000, 0x1, 0x3}, {0x0, 0x2, 0x2, 0x101, 0x7ff, 0xfc, 0x81, 0x33, 0x4, 0x8, 0x5, 0x7ff, 0x1}], 0x8})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1)
pselect6(0x40, &(0x7f0000000000)={0xe22, 0x0, 0x1, 0x0, 0x2f, 0x1, 0x1, 0xb66}, &(0x7f0000000080)={0xb5, 0x4c, 0xb062, 0x81, 0x101, 0x9, 0x1, 0x7}, &(0x7f00000000c0)={0x7, 0x0, 0x628f, 0xffffffff, 0x81, 0x4, 0xffffffffffffff9a, 0x1000}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000140)={0x3}, 0x8})
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000040))

18:33:41 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbe90fa73"], 0x0, 0x0, 0x0})

18:33:41 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:41 executing program 1:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0)
mount$bpf(0x0, 0x0, 0x0, 0x80000, 0x0)
ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000001c0)={0x0, 0x0, 0x40, 0x400000000000, 0xd44})
mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0)
mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0)
gettid()
fstat(0xffffffffffffffff, 0x0)
setreuid(0x0, 0x0)
getpeername$unix(r0, &(0x7f0000000500)=@abs, 0x0)
mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, &(0x7f0000000b80)=ANY=[])
setpgid(0x0, 0x0)
umount2(&(0x7f0000000800)='./file0\x00', 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000100))

18:33:41 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000040000001002560b700fff0ffff04040000000000000a00000006"])

[ 1060.814212][T10043] binder: 10042:10043 transaction failed 29201/-22, size -2549729600380862440-8357151204459877604 line 3147
18:33:41 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x2a86d})

[ 1060.945000][T10099] binder_alloc_mmap_handler: 1 callbacks suppressed
[ 1060.945017][T10099] binder_alloc: binder_alloc_mmap_handler: 10042 20001000-20004000 already mapped failed -16
[ 1060.990872][T10043] binder: BINDER_SET_CONTEXT_MGR already set
18:33:41 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x0, &(0x7f0000000440)="887b700000000000000000f1bd7ef9d522085654946ac208cb0bff50335d70b0a44122b35a837f11f3f991d08ccadc01787d9581fefca5417e95e624e59cb79f37704466163742c437e88b8fd428ae7995d95262bf5af5557dd0a5fae7abc1274cdd641c77c5c60f23969c9e3aa9806b9a111dfbf09dd034748e6be0def788741ed71d39053cb31bf6211f90a1ce9dff15562f0c897f628a08ffa99c5e243aeccf7e078ba67bb6bf89a33a72b92e914eeeb7cd943d905b0f2cbfb51cff46785c3b8e61a8bc0caebe9d67a7ec0ca67362cc7cf769b48609b592a2006c38ac2200d39d27e5")
r4 = dup3(r2, r0, 0x80000)
ioctl$BLKTRACESTOP(r4, 0x1275, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x30000000000000, 0x0)
ioctl$SIOCX25GCAUSEDIAG(r5, 0x89e6, &(0x7f00000000c0)={0x7, 0x20000000000})
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000100)=ANY=[@ANYBLOB="4ba27e4af945255c8017f8f56ad3769ee27735cc71d42b5a7d3e7963348a91ec50e81b74026be4150ce3a4df2aef100aa997221d185e46a97cf5467284adb9f3b7b2"])

18:33:41 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1061.082522][T10043] binder: 10042:10043 ioctl 40046207 0 returned -16
[ 1061.082805][T10098] binder_alloc: 10042: binder_alloc_buf, no vma
18:33:41 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000080000001002560b700fff0ffff04040000000000000a00000006"])

18:33:41 executing program 1:

18:33:41 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa0a"], 0x0, 0x0, 0x0})

18:33:41 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1061.333964][T10220] binder_alloc: 10219: binder_alloc_buf size -1758564197252262656 failed, no address space
18:33:41 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x2a86e})

18:33:41 executing program 1:

18:33:41 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000002002560b700fff0ffff04040000000000000a00000006"])

[ 1061.419448][T10220] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1061.529801][T10332] binder_alloc: binder_alloc_mmap_handler: 10219 20001000-20004000 already mapped failed -16
18:33:41 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8100, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f0000000400)={0x9, 0x108, 0xfa00, {r5, 0x30, "91c02f", "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"}}, 0x110)

18:33:41 executing program 1:

18:33:41 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\xc0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1061.576212][T10220] binder: BINDER_SET_CONTEXT_MGR already set
[ 1061.671238][T10220] binder: 10219:10220 ioctl 40046207 0 returned -16
[ 1061.671283][T10331] binder_alloc: 10219: binder_alloc_buf, no vma
18:33:42 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000080000008002560b700fff0ffff04040000000000000a00000006"])

18:33:42 executing program 1:

18:33:42 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:42 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa25"], 0x0, 0x0, 0x0})

18:33:42 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x2a86f})

18:33:42 executing program 1:

[ 1062.007299][T10497] binder_alloc: binder_alloc_mmap_handler: 10486 20001000-20004000 already mapped failed -16
18:33:42 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:42 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa000000000040000300000100000000000d002560b700fff0ffff04040000000000000a00000006"])

[ 1062.063106][T10493] binder: BINDER_SET_CONTEXT_MGR already set
[ 1062.092482][T10493] binder: 10486:10493 ioctl 40046207 0 returned -16
[ 1062.155911][ T3037] binder_release_work: 6 callbacks suppressed
[ 1062.155920][ T3037] binder: undelivered TRANSACTION_ERROR: 29201
18:33:42 executing program 1:
unshare(0x400)
chroot(0x0)
r0 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x80100, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000240), 0x4)
ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x9)

18:33:42 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x20)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

18:33:42 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa2e"], 0x0, 0x0, 0x0})

18:33:42 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:42 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000001000040002560b700fff0ffff04040000000000000a00000006"])

[ 1062.419785][T10685] binder_alloc: binder_alloc_mmap_handler: 10664 20001000-20004000 already mapped failed -16
[ 1062.494595][T10676] binder: BINDER_SET_CONTEXT_MGR already set
[ 1062.523293][T10676] binder: 10664:10676 ioctl 40046207 0 returned -16
18:33:42 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x40000})

18:33:42 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\xc0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1062.541720][T10716] binder_alloc: 10664: binder_alloc_buf, no vma
[ 1062.576041][    T5] binder: undelivered TRANSACTION_ERROR: 29201
[ 1062.584232][    T5] binder: undelivered TRANSACTION_ERROR: 29189
18:33:43 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa58"], 0x0, 0x0, 0x0})

18:33:43 executing program 1:

18:33:43 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000008000080002560b700fff0ffff04040000000000000a00000006"])

[ 1062.866327][T10820] binder_transaction: 6 callbacks suppressed
[ 1062.866347][T10820] binder: 10804:10820 transaction failed 29201/-22, size -2549729600380862440-6411657738086978788 line 3147
18:33:43 executing program 1:

18:33:43 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\xff\xff\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1062.962985][T10906] binder_alloc: binder_alloc_mmap_handler: 10804 20001000-20004000 already mapped failed -16
18:33:43 executing program 4:
r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2)
accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x800)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x81000008912, &(0x7f0000000100)="0adc1f123c401d88b07000")
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r3, 0x4138ae84, &(0x7f0000000040))

18:33:43 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x100000})

[ 1063.042485][T10820] binder: BINDER_SET_CONTEXT_MGR already set
[ 1063.079982][T10820] binder: 10804:10820 ioctl 40046207 0 returned -16
18:33:43 executing program 1:

[ 1063.133747][    T5] binder: undelivered TRANSACTION_ERROR: 29201
18:33:43 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:43 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa63"], 0x0, 0x0, 0x0})

18:33:43 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa00000000004000030000010000fffffdfd002560b700fff0ffff04040000000000000a00000006"])

18:33:43 executing program 1:

[ 1063.372516][T10961] binder: 10956:10961 transaction failed 29201/-22, size -2549729600380862440-7204291272504186084 line 3147
18:33:43 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1063.491176][T11115] binder_alloc: binder_alloc_mmap_handler: 10956 20001000-20004000 already mapped failed -16
18:33:43 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x800000})

18:33:43 executing program 1:

[ 1063.569907][T10961] binder: BINDER_SET_CONTEXT_MGR already set
[ 1063.606213][T10961] binder: 10956:10961 ioctl 40046207 0 returned -16
18:33:44 executing program 1:

[ 1063.642160][T15722] binder: undelivered TRANSACTION_ERROR: 29201
[ 1063.652633][T11088] binder_alloc: 10956: binder_alloc_buf, no vma
18:33:44 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa000000000040000300000100000080ffff002560b700fff0ffff04040000000000000a00000006"])

[ 1063.687558][T11088] binder: 10956:11088 transaction failed 29189/-3, size -2549729600380862440-7204291272504186084 line 3147
18:33:44 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))
r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7ff, 0x80000)
r5 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000140)={0x332ccb538ac5a24b, r5})

18:33:44 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1063.764130][T15722] binder: undelivered TRANSACTION_ERROR: 29189
18:33:44 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa64"], 0x0, 0x0, 0x0})

18:33:44 executing program 1:

18:33:44 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa00000000004000030000010000fdfdffff002560b700fff0ffff04040000000000000a00000006"])

[ 1063.960015][T11225] binder: 11220:11225 transaction failed 29201/-22, size -2549729600380862440-7276348866542114020 line 3147
[ 1064.000695][T11270] binder_alloc: binder_alloc_mmap_handler: 11220 20001000-20004000 already mapped failed -16
18:33:44 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1064.041749][T11225] binder: BINDER_SET_CONTEXT_MGR already set
18:33:44 executing program 1:

18:33:44 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x1000000})

[ 1064.093343][T15722] binder: undelivered TRANSACTION_ERROR: 29201
[ 1064.099684][T11225] binder: 11220:11225 ioctl 40046207 0 returned -16
18:33:44 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa69"], 0x0, 0x0, 0x0})

18:33:44 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000020000002560b700fff0ffff04040000000000000a00000006"])

18:33:44 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:44 executing program 1:

[ 1064.291791][T11382] binder: 11381:11382 transaction failed 29201/-22, size -2549729600380862440-7636636836731753700 line 3147
[ 1064.389679][T11432] binder_alloc: binder_alloc_mmap_handler: 11381 20001000-20004000 already mapped failed -16
18:33:44 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000000000000000010040050000a91c00000000fa0000000000d50d38ca1ab7108c312cd4f9eebde5cf400003000001000000000000002560b700fff0ffff04040000000000000a0000006ad3e5e519345b0e5a6908834afa53aa01ac65144a09393e1b471cdd7769af3a202dabbfd7b6548332987cee285d2647392e8fdc3559cc21b7604c9488c68f1f6b9bcdd1f0dfc1524a5366ec82e3ef6b2997b2437b791dbf9d493125c670847ddc6aeef2756fca6558018cd0ad6a4ad610f11a22673e7f77675a0fb42f7a077e6bbbec4a4e4bffd62fa7e921caccb715fdd04611935b5e7fa2ece7d34b2272f51719d7ed90bab4113b125559902b000000000000000000000000000000"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000140))
r4 = getpgrp(0x0)
move_pages(r4, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f00000000c0)=[0x0], 0x4)

18:33:44 executing program 1:

18:33:44 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa00000000004000030000010000000d0000002560b700fff0ffff04040000000000000a00000006"])

[ 1064.455727][T11382] binder: BINDER_SET_CONTEXT_MGR already set
18:33:44 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\xff\xff\xff\x8d\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1064.529571][T11429] binder_alloc: 11381: binder_alloc_buf, no vma
[ 1064.541961][T15722] binder: undelivered TRANSACTION_ERROR: 29201
[ 1064.567841][T11382] binder: 11381:11382 ioctl 40046207 0 returned -16
18:33:44 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x2000000})

18:33:45 executing program 1:

[ 1064.622922][T11429] binder: 11381:11429 transaction failed 29189/-3, size -2549729600380862440-7636636836731753700 line 3147
[ 1064.658620][T15722] binder: undelivered TRANSACTION_ERROR: 29189
18:33:45 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa6c"], 0x0, 0x0, 0x0})

18:33:45 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000d00002560b700fff0ffff04040000000000000a00000006"])

18:33:45 executing program 1:

[ 1064.818795][T11558] binder: 11557:11558 transaction failed 29201/-22, size -2549729600380862440-7852809618845537508 line 3147
18:33:45 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\xc0\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:45 executing program 1:

[ 1064.949702][T11637] binder_alloc: binder_alloc_mmap_handler: 11557 20001000-20004000 already mapped failed -16
18:33:45 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000ffff80002560b700fff0ffff04040000000000000a00000006"])

[ 1065.018487][T11558] binder_alloc: 11557: binder_alloc_buf, no vma
[ 1065.019518][T11684] binder: BINDER_SET_CONTEXT_MGR already set
[ 1065.078935][T11558] binder: 11557:11558 transaction failed 29189/-3, size -2549729600380862440-7852809618845537508 line 3147
[ 1065.132860][T11684] binder: 11557:11684 ioctl 40046207 0 returned -16
[ 1065.135749][T15722] binder: undelivered TRANSACTION_ERROR: 29189
18:33:45 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2)
ioctl$KIOCSOUND(r3, 0x4b2f, 0x1)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))
write$smack_current(r1, &(0x7f0000000000)='&\x00', 0x2)

18:33:45 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\xfe\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:45 executing program 1:

18:33:45 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x2840000})

18:33:45 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa6f"], 0x0, 0x0, 0x0})

18:33:45 executing program 1:

18:33:45 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000012560b700fff0ffff04040000000000000a00000006"])

18:33:45 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x8d\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1065.373849][T11751] binder: 11747:11751 transaction failed 29201/-22, size -2549729600380862440-8068982400959321316 line 3147
18:33:45 executing program 1:

[ 1065.463900][T11804] binder_alloc: binder_alloc_mmap_handler: 11747 20001000-20004000 already mapped failed -16
[ 1065.501811][T11804] binder: BINDER_SET_CONTEXT_MGR already set
[ 1065.530472][T11804] binder: 11747:11804 ioctl 40046207 0 returned -16
18:33:45 executing program 1:

18:33:45 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x3000000})

18:33:46 executing program 1:

[ 1065.655955][T11845] binder: 11747:11845 transaction failed 29189/-22, size -2549729600380862440-8068982400959321316 line 2994
18:33:46 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
getrusage(0x1, &(0x7f00000002c0))
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x80100, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000240))
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4138ae84, &(0x7f0000000140)={0x100003b9, 0x0, [{0xbf7, 0x0, 0x3}, {0xed8, 0x0, 0x1}, {0x0, 0x0, 0x6}, {0xbef, 0x0, 0x3}, {0xf87, 0x0, 0xf8}]})

18:33:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000400000012560b700fff0ffff04040000000000000a00000006"])

18:33:46 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\xf0\xff\xff\xff\x7f\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:46 executing program 1:

18:33:46 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa70"], 0x0, 0x0, 0x0})

18:33:46 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x7f\xff\xff\xff\xf0\x00\x00\x00\x00\x00@\x00'}})

[ 1065.961065][T12056] binder_alloc: binder_alloc_mmap_handler: 12028 20001000-20004000 already mapped failed -16
18:33:46 executing program 1:

18:33:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000800000012560b700fff0ffff04040000000000000a00000006"])

[ 1066.023091][T12040] binder: BINDER_SET_CONTEXT_MGR already set
[ 1066.062620][T12040] binder: 12028:12040 ioctl 40046207 0 returned -16
18:33:46 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x4000000})

[ 1066.062679][T12056] binder_alloc: 12028: binder_alloc_buf, no vma
18:33:46 executing program 1:

18:33:46 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa75"], 0x0, 0x0, 0x0})

18:33:46 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\xff\xff\xfe\x00\x00\x00\x00\x00@\x00'}})

18:33:46 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYRES64=r0])
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYSTD(0xffffffffffffff9c, 0x8008563f, &(0x7f00000000c0)=<r5=>0x0)
ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000140)=r5)
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'])

18:33:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000022560b700fff0ffff04040000000000000a00000006"])

18:33:46 executing program 1:

[ 1066.348524][T12231] binder_alloc: binder_alloc_mmap_handler: 12221 20001000-20004000 already mapped failed -16
18:33:46 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00@\x00'}})

[ 1066.433046][T12231] binder_alloc: 12221: binder_alloc_buf, no vma
[ 1066.433699][T12222] binder: BINDER_SET_CONTEXT_MGR already set
18:33:46 executing program 1:

[ 1066.515518][T12222] binder: 12221:12222 ioctl 40046207 0 returned -16
18:33:46 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x5000000})

18:33:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000800000082560b700fff0ffff04040000000000000a00000006"])

18:33:47 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa78"], 0x0, 0x0, 0x0})

18:33:47 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00@\x00'}})

18:33:47 executing program 1:

18:33:47 executing program 1:

18:33:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa00000000004000030000010000000000000d2560b700fff0ffff04040000000000000a00000006"])

[ 1066.842296][T12496] binder_alloc: binder_alloc_mmap_handler: 12434 20001000-20004000 already mapped failed -16
[ 1066.876539][T12496] binder: BINDER_SET_CONTEXT_MGR already set
18:33:47 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80800, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000002c0)={0x2, 0x0, 0x2080, {0x100000, 0xd000, 0x2}, [], "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", "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"})
ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

[ 1066.892417][T12508] binder_alloc: 12434: binder_alloc_buf, no vma
18:33:47 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00@\x00'}})

18:33:47 executing program 1:

[ 1066.933295][T12496] binder: 12434:12496 ioctl 40046207 0 returned -16
18:33:47 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x2, 0x0, 0x0})

18:33:47 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x6000000})

18:33:47 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00@\x00'}})

18:33:47 executing program 1:

[ 1067.155574][T12586] binder: 12581:12586 ioctl c0306201 20000440 returned -14
18:33:47 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00@\x00'}})

18:33:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000010000402560b700fff0ffff04040000000000000a00000006"])

18:33:47 executing program 1:

[ 1067.225475][T12622] binder_alloc: binder_alloc_mmap_handler: 12581 20001000-20004000 already mapped failed -16
[ 1067.256925][T12586] binder: BINDER_SET_CONTEXT_MGR already set
[ 1067.292253][T12586] binder: 12581:12586 ioctl 40046207 0 returned -16
[ 1067.295497][ T3037] binder_release_work: 9 callbacks suppressed
[ 1067.295505][ T3037] binder: undelivered TRANSACTION_ERROR: 29201
[ 1067.323985][T12622] binder_alloc: 12581: binder_alloc_buf, no vma
[ 1067.375180][T12622] binder: 12581:12622 ioctl c0306201 20000440 returned -14
18:33:47 executing program 1:

[ 1067.424028][T15722] binder: undelivered TRANSACTION_ERROR: 29189
18:33:47 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00\x00\x00\x00@\x00'}})

18:33:47 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
epoll_create(0x1)
ioctl$KVM_SET_MSRS(r1, 0x4138ae84, &(0x7f0000000040))

18:33:47 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x3, 0x0, 0x0})

18:33:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000080000802560b700fff0ffff04040000000000000a00000006"])

18:33:47 executing program 1:

18:33:48 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x7000000})

18:33:48 executing program 1:

[ 1067.619458][T12801] binder: 12796:12801 ioctl c0306201 20000440 returned -14
[ 1067.656759][T12812] binder_alloc: binder_alloc_mmap_handler: 12796 20001000-20004000 already mapped failed -16
18:33:48 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\x00\x00\x00\x00@\x00'}})

[ 1067.721556][T12801] binder: BINDER_SET_CONTEXT_MGR already set
[ 1067.782203][T12801] binder: 12796:12801 ioctl 40046207 0 returned -16
[ 1067.784967][    T5] binder: undelivered TRANSACTION_ERROR: 29201
18:33:48 executing program 1:

[ 1067.824601][T12812] binder: 12796:12812 ioctl c0306201 20000440 returned -14
18:33:48 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000fffffdfd2560b700fff0ffff04040000000000000a00000006"])

[ 1067.867747][T15722] binder: undelivered TRANSACTION_ERROR: 29189
18:33:48 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x3, r2})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000200)=0x60, 0x2)
ioctl(r5, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r4, 0x4138ae84, &(0x7f0000000140)=ANY=[@ANYBLOB="fe03daa8120c1cc0c113032ab8f1f566b516f35c5f45c6feb7aed70b79e0240cb6a5725a06b9cc75a5bbc28acab3d2c6493fc50389198721efedf7cbdfccc479d4add1540243efcc5a8b2e167595686170742734ad9ddab2e70dffd878a6247b3e11fb57a3eda2b0f40e2fc45b17cbb668139b5586add86b8ccfcd78ebe535b3a8a80c386c825499f70e6562826dae5c3d9e9920f572f36c0307bfebc0004b347b6cd52b438763e1f1c3c2"])

18:33:48 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x4, 0x0, 0x0})

18:33:48 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:48 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000000000001, 0x0)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x4, 0x0, &(0x7f0000000040))

[ 1068.055606][T13029] binder_transaction: 10 callbacks suppressed
[ 1068.055623][T13029] binder: 13010:13029 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
18:33:48 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x8000000})

[ 1068.145521][T13029] binder: 13010:13029 ioctl c0306201 20000440 returned -14
18:33:48 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa00000000004000030000010000000080ffff2560b700fff0ffff04040000000000000a00000006"])

18:33:48 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1068.191415][T13120] binder_alloc: binder_alloc_mmap_handler: 13010 20001000-20004000 already mapped failed -16
[ 1068.219650][T13029] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.242429][T13029] binder: 13010:13029 ioctl 40046207 0 returned -16
[ 1068.272577][T13120] binder_alloc: 13010: binder_alloc_buf, no vma
18:33:48 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1068.298124][T15722] binder: undelivered TRANSACTION_ERROR: 29201
[ 1068.324671][T13120] binder: 13010:13120 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
18:33:48 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0xb)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

[ 1068.393209][T13120] binder: 13010:13120 ioctl c0306201 20000440 returned -14
[ 1068.420581][T15722] binder: undelivered TRANSACTION_ERROR: 29189
18:33:48 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:48 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x5, 0x0, 0x0})

18:33:48 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000fdfdffff2560b700fff0ffff04040000000000000a00000006"])

18:33:48 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x9000000})

[ 1068.611541][T13268] binder: 13264:13268 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
[ 1068.709047][T13268] binder: 13264:13268 ioctl c0306201 20000440 returned -14
18:33:49 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\xc0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1068.773309][T13319] binder_alloc: binder_alloc_mmap_handler: 13264 20001000-20004000 already mapped failed -16
[ 1068.818376][T13268] binder: BINDER_SET_CONTEXT_MGR already set
[ 1068.835726][T13268] binder: 13264:13268 ioctl 40046207 0 returned -16
18:33:49 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000200002560b700fff0ffff04040000000000000a00000006"])

[ 1068.872909][T13402] binder_alloc: 13264: binder_alloc_buf, no vma
18:33:49 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1068.914703][T13402] binder: 13264:13402 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
18:33:49 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200000, 0x0)
openat$cgroup_int(r4, &(0x7f00000000c0)='memory.low\x00', 0x2, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000140)={0x5, 0x0, [{0xbc1, 0x0, 0x48}, {0x0, 0x0, 0x1000}, {0x8a3, 0x0, 0x7}, {0xbe7, 0x0, 0x9}, {0xbb7, 0x0, 0x181}]})

18:33:49 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1068.975310][    T5] binder: undelivered TRANSACTION_ERROR: 29201
[ 1068.989379][T13402] binder: 13264:13402 ioctl c0306201 20000440 returned -14
[ 1069.015388][ T3037] binder: undelivered TRANSACTION_ERROR: 29189
18:33:49 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x6, 0x0, 0x0})

18:33:49 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xa000000})

[ 1069.119702][T13496] binder: 13495:13496 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
[ 1069.190751][T13496] binder: 13495:13496 ioctl c0306201 20000440 returned -14
18:33:49 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000d00002560b700fff0ffff04040000000000000a00000006"])

[ 1069.244674][T13568] binder_alloc: binder_alloc_mmap_handler: 13495 20001000-20004000 already mapped failed -16
18:33:49 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1069.289080][T13496] binder: BINDER_SET_CONTEXT_MGR already set
[ 1069.355173][ T3037] binder: undelivered TRANSACTION_ERROR: 29201
[ 1069.362478][T13496] binder: 13495:13496 ioctl 40046207 0 returned -16
18:33:49 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc, 0x90000}, 0xc)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8000000000000000)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000140)=""/31)
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

18:33:49 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x7, 0x0, 0x0})

18:33:49 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:49 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa000000000040000300000100000000000d002560b700fff0ffff04040000000000000a00000006"])

[ 1069.574314][T13668] binder: 13665:13668 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
18:33:50 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xb000000})

[ 1069.619171][T13668] binder: 13665:13668 ioctl c0306201 20000440 returned -14
[ 1069.640199][T13723] binder_alloc: binder_alloc_mmap_handler: 13665 20001000-20004000 already mapped failed -16
18:33:50 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:33:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\xc0\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1069.686213][T13668] binder: BINDER_SET_CONTEXT_MGR already set
[ 1069.694362][T13668] binder: 13665:13668 ioctl 40046207 0 returned -16
[ 1069.702168][T13744] binder_alloc: 13665: binder_alloc_buf, no vma
[ 1069.733002][T13744] binder: 13665:13744 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
[ 1069.763299][ T3037] binder: undelivered TRANSACTION_ERROR: 29201
[ 1069.776274][T13744] binder: 13665:13744 ioctl c0306201 20000440 returned -14
18:33:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000002002560b700fff0ffff04040000000000000a00000006"])

18:33:50 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x12, 0x0, 0x0})

18:33:50 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:33:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\xff\xff\xfe\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1069.962666][T13860] binder: 13858:13860 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
18:33:50 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040)={0x1ab})

[ 1070.007350][T13860] binder: 13858:13860 ioctl c0306201 20000440 returned -14
[ 1070.059694][T13923] binder_alloc: binder_alloc_mmap_handler: 13858 20001000-20004000 already mapped failed -16
[ 1070.103059][T13923] binder_alloc: 13858: binder_alloc_buf, no vma
[ 1070.109926][T13923] binder: 13858:13923 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
[ 1070.131943][T13923] binder: 13858:13923 ioctl c0306201 20000440 returned -14
18:33:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1070.162941][T13860] binder: BINDER_SET_CONTEXT_MGR already set
[ 1070.190436][T13860] binder: 13858:13860 ioctl 40046207 0 returned -16
18:33:50 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xc000000})

18:33:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa000000000040000300000100000000000d002560b700fff0ffff04040000000000000a00000006"])

18:33:50 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x48, 0x0, 0x0})

18:33:50 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'])

[ 1070.417063][T14069] binder: 14068:14069 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
[ 1070.442170][T14069] binder: 14068:14069 ioctl c0306201 20000440 returned -14
18:33:50 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)

18:33:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1070.526304][T14069] binder: BINDER_SET_CONTEXT_MGR already set
[ 1070.546448][T14092] binder_alloc: 14068: binder_alloc_buf, no vma
18:33:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa00000000004000030000010000000000000d2560b700fff0ffff04040000000000000a00000006"])

[ 1070.577683][T14069] binder: 14068:14069 ioctl 40046207 0 returned -16
[ 1070.640259][T14092] binder: 14068:14092 ioctl c0306201 20000440 returned -14
18:33:51 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x4c, 0x0, 0x0})

18:33:51 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1070.787095][T14201] binder: 14200:14201 ioctl c0306201 20000440 returned -14
18:33:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000022560b700fff0ffff04040000000000000a00000006"])

18:33:51 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xd000000})

[ 1070.858186][T14201] binder: BINDER_SET_CONTEXT_MGR already set
[ 1070.924436][T14201] binder: 14200:14201 ioctl 40046207 0 returned -16
18:33:51 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)

18:33:51 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x60, 0x0, 0x0})

18:33:51 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa00000000004000030000010000000000000d2560b700fff0ffff04040000000000000a00000006"])

[ 1071.094795][T14322] binder: 14306:14322 ioctl c0306201 20000440 returned -14
[ 1071.157398][T14364] binder_alloc_mmap_handler: 2 callbacks suppressed
[ 1071.157416][T14364] binder_alloc: binder_alloc_mmap_handler: 14306 20001000-20004000 already mapped failed -16
18:33:51 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x3000008910, &(0x7f0000000100)="0adc1f123c40a41d88b076")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

18:33:51 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:51 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x68, 0x0, 0x0})

18:33:51 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xe000000})

18:33:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b702fff0ffff04040000000000000a00000006"])

18:33:51 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)

[ 1071.481558][T14465] binder: 14457:14465 ioctl c0306201 20000440 returned -14
[ 1071.518046][T14498] binder_alloc: binder_alloc_mmap_handler: 14457 20001000-20004000 already mapped failed -16
18:33:51 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\xff\xff\xff\x8d\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1071.599857][T14465] binder: BINDER_SET_CONTEXT_MGR already set
18:33:52 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000f0ffff0404000000000053f4bd792c0b8d0727679c11514b95a327a6772891ac4b6926b3524bd70bdff0ee6a4a6e7f5ff9991fa66b5f763f2cf5402ff83c60d5d722cfb7cdaefefe911497e233a5f5b07f1fb8734e5fa18324c62858ee0741edc3caa491d4060838ad7e078debf04e00189ec7072451c9c6a170246965aeb39514003a9ef960e82eacd4fdefe420a1264849ff20a632714a5657eaa11abcb5b4e03b8095bbb6313425857506a2944299d18d29473cc1196063c93baf953c325d834c0b6b9ed4d7f70189"])
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000000)={0x3, 0x8})
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"])
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[ 1071.662158][T14465] binder: 14457:14465 ioctl 40046207 0 returned -16
18:33:52 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x6c, 0x0, 0x0})

18:33:52 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\xc0\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:52 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xf000000})

[ 1071.827550][T14651] binder: 14650:14651 ioctl c0306201 20000440 returned -14
[ 1071.866743][T14654] binder_alloc: binder_alloc_mmap_handler: 14650 20001000-20004000 already mapped failed -16
[ 1071.919733][T14651] binder: BINDER_SET_CONTEXT_MGR already set
[ 1071.947336][T14651] binder: 14650:14651 ioctl 40046207 0 returned -16
18:33:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b70dfff0ffff04040000000000000a00000006"])

[ 1071.971305][T14692] binder_alloc: 14650: binder_alloc_buf, no vma
[ 1072.002835][T14692] binder: 14650:14692 ioctl c0306201 20000440 returned -14
18:33:52 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\xfe\xff\xff\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:52 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:33:52 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x74, 0x0, 0x0})

18:33:52 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x8d\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1072.216238][T14823] binder: 14818:14823 ioctl c0306201 20000440 returned -14
18:33:52 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:33:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff05040000000000000a00000006"])

18:33:52 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x80000000000, 0x75}, 0x6}, 0x20, 0x1, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

[ 1072.296203][T14875] binder_alloc: binder_alloc_mmap_handler: 14818 20001000-20004000 already mapped failed -16
18:33:52 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\xf0\xff\xff\xff\x7f\x00\x00\x00\x00\x00@\x00'}})

18:33:52 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x10000000})

[ 1072.363038][T14823] binder: BINDER_SET_CONTEXT_MGR already set
18:33:52 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1072.434504][T14823] binder: 14818:14823 ioctl 40046207 0 returned -16
18:33:52 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x7a, 0x0, 0x0})

[ 1072.520744][T15722] binder_release_work: 10 callbacks suppressed
[ 1072.520753][T15722] binder: undelivered TRANSACTION_ERROR: 29201
18:33:53 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x7f\xff\xff\xff\xf0\x00\x00\x00\x00@\x00'}})

18:33:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04050000000000000a00000006"])

18:33:53 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r0, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1072.654296][T15014] binder: 15012:15014 ioctl c0306201 20000440 returned -14
18:33:53 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000180)={0x0, 0x2, 0x401})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0='bpq0\x00', 0x1, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x10000, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl(r4, 0x81000008912, &(0x7f0000000000)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r3, 0x4138ae84, &(0x7f00000001c0)=ANY=[@ANYBLOB="0900ffffffffffff9e0e8bcbb258b4a7a24f877fab14065f04"])

[ 1072.756477][T15061] binder_alloc: binder_alloc_mmap_handler: 15012 20001000-20004000 already mapped failed -16
[ 1072.801404][T15014] binder: BINDER_SET_CONTEXT_MGR already set
18:33:53 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfe\x00\x00\x00\x00@\x00'}})

18:33:53 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r0, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:33:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040200000000000a00000006"])

[ 1072.855211][T15014] binder: 15012:15014 ioctl 40046207 0 returned -16
18:33:53 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x12000000})

[ 1072.970059][T15150] binder_alloc: 15012: binder_alloc_buf, no vma
18:33:53 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r0, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:33:53 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00@\x00'}})

[ 1073.013140][T15150] binder: 15012:15150 ioctl c0306201 20000440 returned -14
[ 1073.017946][    T5] binder: undelivered TRANSACTION_ERROR: 29201
[ 1073.102277][T15722] binder: undelivered TRANSACTION_ERROR: 29189
18:33:53 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:33:53 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x300, 0x0, 0x0})

18:33:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040d00000000000a00000006"])

18:33:53 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
recvmmsg(r3, &(0x7f0000004300)=[{{&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000340)=""/124, 0x7c}], 0x3}, 0x401}, {{&(0x7f00000003c0)=@ipx, 0x80, &(0x7f0000000800)=[{&(0x7f0000000440)=""/74, 0x4a}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f00000004c0)=""/229, 0xe5}, {&(0x7f0000000240)=""/35, 0x23}, {&(0x7f00000005c0)=""/81, 0x51}, {&(0x7f0000000640)=""/95, 0x5f}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/53, 0x35}, {&(0x7f0000000780)=""/113, 0x71}], 0x9}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/84, 0x54}, {&(0x7f0000000940)=""/81, 0x51}], 0x2, &(0x7f0000000a00)=""/4096, 0x1000}, 0x8000}, {{&(0x7f0000001a00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003080)=[{&(0x7f0000001a80)=""/193, 0xc1}, {&(0x7f0000001b80)=""/249, 0xf9}, {&(0x7f0000001c80)=""/36, 0x24}, {&(0x7f0000001cc0)=""/172, 0xac}, {&(0x7f0000001d80)=""/245, 0xf5}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/134, 0x86}, {&(0x7f0000002f40)=""/8, 0x8}, {&(0x7f0000002f80)=""/156, 0x9c}, {&(0x7f0000003040)=""/15, 0xf}], 0xa, &(0x7f0000003140)=""/22, 0x16}, 0x100000000}, {{&(0x7f0000003180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003200)=""/150, 0x96}], 0x1, &(0x7f0000003300)=""/4096, 0x1000}, 0x3}], 0x5, 0x2101, &(0x7f0000004440)={0x0, 0x989680})
ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000004480)={r3})
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

18:33:53 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00@\x00'}})

[ 1073.296385][T15279] binder_transaction: 9 callbacks suppressed
[ 1073.296403][T15279] binder: 15271:15279 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
18:33:53 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1073.360230][T15279] binder: 15271:15279 ioctl c0306201 20000440 returned -14
[ 1073.392490][T15351] binder_alloc: binder_alloc_mmap_handler: 15271 20001000-20004000 already mapped failed -16
18:33:53 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00@\x00'}})

18:33:53 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x18000000})

18:33:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff0404000d000000000a00000006"])

[ 1073.473978][T15279] binder: BINDER_SET_CONTEXT_MGR already set
[ 1073.502582][T15279] binder: 15271:15279 ioctl 40046207 0 returned -16
[ 1073.510136][ T7825] binder: undelivered TRANSACTION_ERROR: 29201
18:33:53 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:33:54 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x500, 0x0, 0x0})

18:33:54 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0xfffffffffffffffc, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
execve(&(0x7f0000000000)='.\x00', &(0x7f0000000140)=[&(0x7f00000000c0)='/dev/kvm\x00'], &(0x7f00000003c0)=[&(0x7f0000000180)='/dev/kvm\x00', &(0x7f00000001c0)='selfem0posix_acl_accessem1}keyringeth0system]vmnet0\x00', &(0x7f0000000200)='/dev/kvm\x00', &(0x7f0000000240)='/dev/kvm\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='/dev/kvm\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='/dev/kvm\x00'])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

18:33:54 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00@\x00'}})

18:33:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff0404ffff800000000a00000006"])

18:33:54 executing program 1:
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1073.799010][T15535] binder: 15533:15535 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
18:33:54 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x20000000})

[ 1073.895034][T15535] binder: 15533:15535 ioctl c0306201 20000440 returned -14
[ 1073.941094][T15628] binder_alloc: binder_alloc_mmap_handler: 15533 20001000-20004000 already mapped failed -16
18:33:54 executing program 1:
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:33:54 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00@\x00'}})

18:33:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000100000a00000006"])

[ 1074.068262][T15535] binder: BINDER_SET_CONTEXT_MGR already set
[ 1074.097191][T15535] binder: 15533:15535 ioctl 40046207 0 returned -16
18:33:54 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$VT_SETMODE(r3, 0x5602, &(0x7f00000000c0)={0x7, 0xffffffffffff596c, 0x6, 0x7, 0xffffffffffffffee})
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xd9)
ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000140)=ANY=[@ANYBLOB="010000805500000070a5a68331301b29493d866a6b0070a9a8e7a2a955d9d15afc4f310404245b883703be854d79a40ca93d92b3229da6d556dda9c64156af021e44d1cf1d77d6627bcc7160a69e76000000328f8fe08be9b2ce6fb91cb22ade69264ce46e8b624cfd93f75f87e04c71dadd056ba0619c8e3a8ff7c8877419209b69255433a047731789df33dad163a697736f7dc18a1918316b463c320c1d0e41f615a40e938fa714e56e2ba34ee76979aa8e806e05c39824f51bb4f9c7806d6482849ec0cfca7c729aa1799fa1872496b625a86c4c197bc25f780961774adb0f66534a570c810cde3a4608bd6fb855973775e0c169e869abb0406d5b990ecd03a942415f163fe538799381dd1d6b04cb23acf4ff"])

[ 1074.145337][    T5] binder: undelivered TRANSACTION_ERROR: 29201
[ 1074.161627][T15626] binder: 15533:15626 transaction failed 29189/-22, size -2549729600380862440-8357212777111033060 line 2994
[ 1074.192495][T15626] binder: 15533:15626 ioctl c0306201 20000440 returned -14
[ 1074.200238][T15722] binder: undelivered TRANSACTION_ERROR: 29189
18:33:54 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00\x00\x00@\x00'}})

18:33:54 executing program 1:
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:33:54 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x600, 0x0, 0x0})

18:33:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04044000000100000a00000006"])

[ 1074.374090][T15807] binder: 15796:15807 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
18:33:54 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:33:54 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\x00\x00\x00@\x00'}})

[ 1074.435367][T15807] binder: 15796:15807 ioctl c0306201 20000440 returned -14
18:33:54 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x3e0e0000})

[ 1074.492257][T15874] binder_alloc: binder_alloc_mmap_handler: 15796 20001000-20004000 already mapped failed -16
[ 1074.537708][T15807] binder: BINDER_SET_CONTEXT_MGR already set
[ 1074.575732][T15807] binder: 15796:15807 ioctl 40046207 0 returned -16
[ 1074.632239][T15902] binder_alloc: 15796: binder_alloc_buf, no vma
[ 1074.646198][T15902] binder: 15796:15902 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
[ 1074.670261][    T5] binder: undelivered TRANSACTION_ERROR: 29201
18:33:55 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:33:55 executing program 4:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x100, 0x0)
ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x7)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7572646972f80b2f66696c65302cff0f0000856b69723d2e3a66696c65302c57c0ed0f12f2501530653100000000"])
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
renameat(r1, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f00000007c0)='./file1\x00')
ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa1000000000400003000001000000000000002560b700fff0ffff04040000000000000a0000000641f68ef9412d7ad15de9202d2734b79799e2f06a3a1452024c8593fff2cdedd69e4c800adf0c4e0c1b8cabe6481f2764210a5519a3260293045597c166f2ec93fe35cbb23d9fa64c8156605652ab0ef92d"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040)={0x1000000000000037})

18:33:55 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1074.712133][T15902] binder: 15796:15902 ioctl c0306201 20000440 returned -14
18:33:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04048000000100000a00000006"])

[ 1074.804446][T15983] overlayfs: unrecognized mount option "urdirø/file0" or missing value
[ 1074.817945][ T7825] binder: undelivered TRANSACTION_ERROR: 29189
18:33:55 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x700, 0x0, 0x0})

18:33:55 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:55 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:33:55 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x3f000000})

[ 1074.986737][T16098] binder: 16091:16098 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
18:33:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000200000a00000006"])

[ 1075.042301][T16098] binder: 16091:16098 ioctl c0306201 20000440 returned -14
[ 1075.090843][T16170] binder_alloc: binder_alloc_mmap_handler: 16091 20001000-20004000 already mapped failed -16
18:33:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockname$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000140))

[ 1075.142503][T16098] binder: BINDER_SET_CONTEXT_MGR already set
[ 1075.150766][T16098] binder: 16091:16098 ioctl 40046207 0 returned -16
[ 1075.181084][T16176] binder_alloc: 16091: binder_alloc_buf, no vma
18:33:55 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1075.200962][ T3037] binder: undelivered TRANSACTION_ERROR: 29201
[ 1075.208966][T16176] binder: 16091:16176 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
[ 1075.227467][T16176] binder: 16091:16176 ioctl c0306201 20000440 returned -14
[ 1075.235496][ T3037] binder: undelivered TRANSACTION_ERROR: 29189
18:33:55 executing program 1:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:33:55 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x1200, 0x0, 0x0})

18:33:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04048000000800000a00000006"])

18:33:55 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\xc0\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:55 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x40000000})

[ 1075.429444][T16327] binder: 16325:16327 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
[ 1075.469337][T16327] binder: 16325:16327 ioctl c0306201 20000440 returned -14
[ 1075.531449][T16357] binder_alloc: binder_alloc_mmap_handler: 16325 20001000-20004000 already mapped failed -16
[ 1075.569151][T16357] binder: BINDER_SET_CONTEXT_MGR already set
18:33:55 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x2000, 0x0, 0x0})

18:33:56 executing program 1:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1075.575802][T16406] binder_alloc: 16325: binder_alloc_buf, no vma
[ 1075.582589][T16357] binder: 16325:16357 ioctl 40046207 0 returned -16
[ 1075.589464][T16406] binder: 16325:16406 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
[ 1075.601292][T16406] binder: 16325:16406 ioctl c0306201 20000440 returned -14
18:33:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

18:33:56 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000d00000a00000006"])

[ 1075.769080][T16451] binder: 16449:16451 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
18:33:56 executing program 1:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:33:56 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1075.855256][T16451] binder: 16449:16451 ioctl c0306201 20000440 returned -14
18:33:56 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x5ea80200})

[ 1075.922864][T16451] binder: BINDER_SET_CONTEXT_MGR already set
18:33:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040100004000000a00000006"])

[ 1076.004319][T16451] binder: 16449:16451 ioctl 40046207 0 returned -16
18:33:56 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1076.071298][T16574] binder_alloc: 16449: binder_alloc_buf, no vma
[ 1076.108030][T16574] binder: 16449:16574 ioctl c0306201 20000440 returned -14
18:33:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040800008000000a00000006"])

18:33:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)={0x100000000, 0x2, 0x8})
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000058970de4d100451c8a9ed93d438a5a0f2dc66d7beb85e6447566dbaf2231482996f47cec6a8f32eaccdb8cb496ea31ba82b684d02353cfbd4a60753fc620ac6730e4c240351832629be9c49a13b790ed0111f9579feecde8feadfde79e76627d0c02e6902464ff94ec6e0f6d6fb076f540ad7b85b5bc46fd0940d47c2017e4c20e19bdf26de49025893ce4f668120f281d6e8ba3921f7ec2bd3023f9544815507ac94ce72474e79bf8174fc87232237a0febf0ded56af6ab82285576a1ca6462c337d06c8fd8"])

18:33:56 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x4800, 0x0, 0x0})

18:33:56 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1076.318791][T16707] binder: 16706:16707 ioctl c0306201 20000440 returned -14
[ 1076.373353][T16760] binder_alloc_mmap_handler: 1 callbacks suppressed
[ 1076.373370][T16760] binder_alloc: binder_alloc_mmap_handler: 16706 20001000-20004000 already mapped failed -16
[ 1076.391260][T16707] binder: BINDER_SET_CONTEXT_MGR already set
18:33:56 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x5fa80200})

18:33:56 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:33:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff0404fffffdfd00000a00000006"])

[ 1076.416847][T16707] binder: 16706:16707 ioctl 40046207 0 returned -16
[ 1076.447330][T16760] binder: 16706:16760 ioctl c0306201 20000440 returned -14
18:33:56 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\xc0\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:56 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x4c00, 0x0, 0x0})

18:33:57 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1076.639727][T16857] binder: 16856:16857 ioctl c0306201 20000440 returned -14
18:33:57 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040080ffff00000a00000006"])

18:33:57 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\xff\xff\xfe\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1076.715769][T16909] binder_alloc: binder_alloc_mmap_handler: 16856 20001000-20004000 already mapped failed -16
18:33:57 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1076.761450][T16857] binder: BINDER_SET_CONTEXT_MGR already set
[ 1076.806498][T16857] binder: 16856:16857 ioctl 40046207 0 returned -16
[ 1076.875767][T16989] binder_alloc: 16856: binder_alloc_buf, no vma
18:33:57 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

18:33:57 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x60a80200})

18:33:57 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff0404fdfdffff00000a00000006"])

[ 1076.983506][T16989] binder: 16856:16989 ioctl c0306201 20000440 returned -14
18:33:57 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:57 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x6000, 0x0, 0x0})

18:33:57 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:57 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1077.204765][T17040] binder: 17038:17040 ioctl c0306201 20000440 returned -14
18:33:57 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040002000000000a00000006"])

[ 1077.263913][T17116] binder_alloc: binder_alloc_mmap_handler: 17038 20001000-20004000 already mapped failed -16
[ 1077.329546][T17040] binder: BINDER_SET_CONTEXT_MGR already set
[ 1077.362153][T17040] binder: 17038:17040 ioctl 40046207 0 returned -16
[ 1077.379036][T17116] binder_alloc: 17038: binder_alloc_buf, no vma
18:33:57 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1077.458790][T17116] binder: 17038:17116 ioctl c0306201 20000440 returned -14
18:33:57 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x6800, 0x0, 0x0})

18:33:57 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockname$netrom(r1, &(0x7f00000001c0)={{0x3, @bcast}, [@netrom, @default, @bcast, @netrom, @null, @rose, @null, @bcast]}, &(0x7f00000000c0)=0x48)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))
fgetxattr(r2, &(0x7f0000000000)=@random={'security.', '/dev/kvm\x00'}, &(0x7f0000000140)=""/75, 0x4b)

18:33:57 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:33:57 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x61a80200})

18:33:57 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff0404000d000000000a00000006"])

18:33:58 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1077.678842][T17245] binder: 17244:17245 ioctl c0306201 20000440 returned -14
[ 1077.764724][T17254] binder_alloc: binder_alloc_mmap_handler: 17244 20001000-20004000 already mapped failed -16
18:33:58 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff040400000d0000000a00000006"])

[ 1077.835023][T17245] binder: BINDER_SET_CONTEXT_MGR already set
[ 1077.870238][T17245] binder: 17244:17245 ioctl 40046207 0 returned -16
[ 1077.871221][T17323] binder_alloc: 17244: binder_alloc_buf, no vma
18:33:58 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1077.942401][ T3037] binder_release_work: 10 callbacks suppressed
[ 1077.942409][ T3037] binder: undelivered TRANSACTION_ERROR: 29201
18:33:58 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff040400ffff8000000a00000006"])

18:33:58 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x62a80200})

[ 1078.055431][T17323] binder: 17244:17323 ioctl c0306201 20000440 returned -14
18:33:58 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\xff\xff\xff\x8d\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:58 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:33:58 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x6c00, 0x0, 0x0})

18:33:58 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000000)=ANY=[@ANYBLOB="008f6ab85530cc8b39000048ab54bc1fde40a38be0e0000092000000"])

[ 1078.222334][ T3037] binder: undelivered TRANSACTION_ERROR: 29189
18:33:58 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\xc0\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1078.319804][T17492] binder_transaction: 9 callbacks suppressed
[ 1078.319836][T17492] binder: 17486:17492 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
18:33:58 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:33:58 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000001000a00000006"])

[ 1078.432095][T17492] binder: 17486:17492 ioctl c0306201 20000440 returned -14
[ 1078.475988][T17557] binder_alloc: binder_alloc_mmap_handler: 17486 20001000-20004000 already mapped failed -16
18:33:58 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\xfe\xff\xff\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1078.519970][T17492] binder: BINDER_SET_CONTEXT_MGR already set
[ 1078.534074][T17492] binder: 17486:17492 ioctl 40046207 0 returned -16
18:33:58 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1078.589512][ T3037] binder: undelivered TRANSACTION_ERROR: 29201
18:33:59 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x7400, 0x0, 0x0})

18:33:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040040000001000a00000006"])

18:33:59 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x63a80200})

18:33:59 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1078.798135][T17717] binder: 17716:17717 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
[ 1078.834994][T17717] binder: 17716:17717 ioctl c0306201 20000440 returned -14
18:33:59 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x8d\xff\xff\xff\x00\x00\x00\x00\x00\x00@\x00'}})

18:33:59 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:33:59 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x2041)
ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f00000000c0)={0x7f, 0x5, 0x2, 0x7f, 0x4, 0x100000001})
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

[ 1078.845103][T17725] binder_alloc: binder_alloc_mmap_handler: 17716 20001000-20004000 already mapped failed -16
[ 1078.864266][T17717] binder: BINDER_SET_CONTEXT_MGR already set
[ 1078.870667][T17717] binder: 17716:17717 ioctl 40046207 0 returned -16
[ 1078.957024][T17725] binder_alloc: 17716: binder_alloc_buf, no vma
[ 1078.967725][ T3037] binder: undelivered TRANSACTION_ERROR: 29201
[ 1078.986328][T17725] binder: 17716:17725 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
18:33:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040080000001000a00000006"])

[ 1079.011845][T17725] binder: 17716:17725 ioctl c0306201 20000440 returned -14
[ 1079.023540][ T3037] binder: undelivered TRANSACTION_ERROR: 29189
18:33:59 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:33:59 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x7a00, 0x0, 0x0})

18:33:59 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x64a80200})

18:33:59 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x7f\x00\x00\x00\x00@\x00'}})

[ 1079.183360][T17897] binder: 17887:17897 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
18:33:59 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:33:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000002000a00000006"])

[ 1079.265989][T17897] binder: 17887:17897 ioctl c0306201 20000440 returned -14
[ 1079.315372][T17962] binder_alloc: binder_alloc_mmap_handler: 17887 20001000-20004000 already mapped failed -16
18:33:59 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x9af, 0x0, 0x100}, {0x4b564deb, 0x0, 0x7fff}]})
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))
r4 = dup3(r0, r1, 0x80000)
setsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f00000000c0)=0xfffffffffffffffc, 0x4)

[ 1079.384817][T17897] binder: BINDER_SET_CONTEXT_MGR already set
[ 1079.405453][T17897] binder: 17887:17897 ioctl 40046207 0 returned -16
[ 1079.425588][T17995] binder_alloc: 17887: binder_alloc_buf, no vma
18:33:59 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\xf0\x00\x00\x00@\x00'}})

18:33:59 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1079.437678][T17995] binder: 17887:17995 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
[ 1079.452066][T17995] binder: 17887:17995 ioctl c0306201 20000440 returned -14
[ 1079.458418][    T5] binder: undelivered TRANSACTION_ERROR: 29201
[ 1079.539949][ T7825] binder: undelivered TRANSACTION_ERROR: 29189
18:33:59 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x1000000, 0x0, 0x0})

18:34:00 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfe\x00\x00\x00@\x00'}})

18:34:00 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x65a80200})

18:34:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040080000008000a00000006"])

18:34:00 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1079.669984][T18111] binder: 18106:18111 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
[ 1079.747105][T18111] binder: 18106:18111 ioctl c0306201 20000440 returned -14
18:34:00 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1079.802908][T18175] binder_alloc: binder_alloc_mmap_handler: 18106 20001000-20004000 already mapped failed -16
[ 1079.848420][T18111] binder: BINDER_SET_CONTEXT_MGR already set
[ 1079.873448][T18111] binder: 18106:18111 ioctl 40046207 0 returned -16
18:34:00 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00@\x00'}})

18:34:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff0404000000000d000a00000006"])

18:34:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYRESDEC])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000000)=ANY=[@ANYBLOB="625d0b370000007d7b1e489efab51000"])

18:34:00 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1079.977998][T18299] binder_alloc: 18106: binder_alloc_buf, no vma
[ 1080.014240][T18299] binder: 18106:18299 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
18:34:00 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x66a80200})

[ 1080.113644][    T5] binder: undelivered TRANSACTION_ERROR: 29201
[ 1080.120589][T18299] binder: 18106:18299 ioctl c0306201 20000440 returned -14
18:34:00 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00@\x00'}})

[ 1080.160013][    T5] binder: undelivered TRANSACTION_ERROR: 29189
18:34:00 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:00 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x2000000, 0x0, 0x0})

18:34:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040001000040000a00000006"])

18:34:00 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:00 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00'}})

[ 1080.304552][T18393] binder: 18392:18393 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
[ 1080.337103][T18393] binder: 18392:18393 ioctl c0306201 20000440 returned -14
[ 1080.407236][T18454] binder_alloc: binder_alloc_mmap_handler: 18392 20001000-20004000 already mapped failed -16
18:34:00 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x84800)
ioctl$BLKTRACESTART(r1, 0x1274, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000140)={0xdd, {{0x2, 0x4e22, @rand_addr=0x4000000000000000}}}, 0x88)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
fcntl$getown(r2, 0x9)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x200000, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r3, 0x4138ae84, &(0x7f0000000040))

[ 1080.469262][T18393] binder: BINDER_SET_CONTEXT_MGR already set
[ 1080.491207][T18393] binder: 18392:18393 ioctl 40046207 0 returned -16
[ 1080.526150][T18493] binder_alloc: 18392: binder_alloc_buf, no vma
[ 1080.564799][    T5] binder: undelivered TRANSACTION_ERROR: 29201
18:34:00 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00@\x00'}})

18:34:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040008000080000a00000006"])

[ 1080.576323][T18493] binder: 18392:18493 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
18:34:01 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:01 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x67a80200})

[ 1080.662495][T18493] binder: 18392:18493 ioctl c0306201 20000440 returned -14
18:34:01 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00@\x00'}})

18:34:01 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x3000000, 0x0, 0x0})

18:34:01 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r0, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:01 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00002006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

[ 1080.885902][T18673] binder: 18672:18673 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
18:34:01 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff040400fffffdfd000a00000006"])

18:34:01 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00\x00@\x00'}})

[ 1080.999803][T18673] binder: 18672:18673 ioctl c0306201 20000440 returned -14
[ 1081.049918][T18745] binder_alloc: binder_alloc_mmap_handler: 18672 20001000-20004000 already mapped failed -16
[ 1081.065454][T18673] binder: BINDER_SET_CONTEXT_MGR already set
[ 1081.086865][T18745] binder_alloc: 18672: binder_alloc_buf, no vma
18:34:01 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r0, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:01 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\x00\x00@\x00'}})

[ 1081.120129][T18673] binder: 18672:18673 ioctl 40046207 0 returned -16
18:34:01 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x68a80200})

[ 1081.165681][T18745] binder: 18672:18745 ioctl c0306201 20000440 returned -14
18:34:01 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff0404000080ffff000a00000006"])

18:34:01 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x4000000, 0x0, 0x0})

18:34:01 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r0, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:01 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1081.346946][T18869] binder: 18863:18869 ioctl c0306201 20000440 returned -14
18:34:01 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, 0x0, 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1081.419449][T18936] binder_alloc: binder_alloc_mmap_handler: 18863 20001000-20004000 already mapped failed -16
[ 1081.471425][T18869] binder: BINDER_SET_CONTEXT_MGR already set
18:34:01 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff040400fdfdffff000a00000006"])

[ 1081.532728][T18869] binder: 18863:18869 ioctl 40046207 0 returned -16
[ 1081.532749][T19001] binder_alloc: 18863: binder_alloc_buf, no vma
18:34:01 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x1fb16d3ab4f81232)
ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000000c0))
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r3, 0x4138ae84, &(0x7f0000000040))

18:34:01 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, 0x0, 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1081.591535][T19001] binder: 18863:19001 ioctl c0306201 20000440 returned -14
18:34:02 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x69a80200})

18:34:02 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x5000000, 0x0, 0x0})

18:34:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000020000000a00000006"])

18:34:02 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, 0x0, 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1081.895959][T19115] binder: 19083:19115 ioctl c0306201 20000440 returned -14
18:34:02 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:02 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1081.959496][T19181] binder_alloc: binder_alloc_mmap_handler: 19083 20001000-20004000 already mapped failed -16
[ 1082.056346][T19115] binder: BINDER_SET_CONTEXT_MGR already set
[ 1082.093407][T19115] binder: 19083:19115 ioctl 40046207 0 returned -16
[ 1082.100334][T19258] binder_alloc: 19083: binder_alloc_buf, no vma
18:34:02 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x6aa80200})

18:34:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff040400000d0000000a00000006"])

18:34:02 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000402703000001000000000000002560b700fff0caff040400000000a7210a00000006db820b189fa14e455af1a079631131e1111852a204650f0ff5be839e44513d0b0c65a59310783bca31a153b0519d4722877780e08e4ca7b23e73f8e8279a8a48ca65cb67162057f02c33e4d7202dc55c1a0348c7e771001f0aa4373ebce4125a78e26ca46f09fb11fa8fd4f31de9ad01beede0f913738cb1c4596be257000000009238d51ed4ffa8bd84892b15937d0c37f109dd8d28f8f3ea2a8433b745a8ea6391d921bb35a953bbe978a9d6aa29e50bbb786d93e181ec7ab31e2ae18e304856a68087c6a5f1595052f7f59bea35efd8ebb7e6cd0dba047c1c2e3e98"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040)=ANY=[@ANYBLOB="c7a59bf8544302b9"])

[ 1082.123930][T19258] binder: 19083:19258 ioctl c0306201 20000440 returned -14
18:34:02 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:02 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\xc0\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x6000000, 0x0, 0x0})

18:34:02 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000d00000a00000006"])

[ 1082.375098][T19290] binder: 19289:19290 ioctl c0306201 20000440 returned -14
18:34:02 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1082.463941][T19346] binder_alloc: binder_alloc_mmap_handler: 19289 20001000-20004000 already mapped failed -16
[ 1082.526331][T19290] binder: BINDER_SET_CONTEXT_MGR already set
18:34:02 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1082.567128][T19290] binder: 19289:19290 ioctl 40046207 0 returned -16
[ 1082.567153][T19405] binder_alloc: 19289: binder_alloc_buf, no vma
18:34:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000ffff80000a00000006"])

[ 1082.619983][T19405] binder: 19289:19405 ioctl c0306201 20000440 returned -14
18:34:03 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:03 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x6da80200})

18:34:03 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:03 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
getpid()
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

18:34:03 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x7000000, 0x0, 0x0})

18:34:03 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000010a00000006"])

18:34:03 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1082.982207][T19519] binder: 19518:19519 ioctl c0306201 20000440 returned -14
[ 1083.042844][T19559] binder_alloc: binder_alloc_mmap_handler: 19518 20001000-20004000 already mapped failed -16
[ 1083.064225][T19559] binder_alloc: 19518: binder_alloc_buf, no vma
[ 1083.070653][T19559] binder: 19518:19559 ioctl c0306201 20000440 returned -14
18:34:03 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\xc0\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1083.099008][T19519] binder: BINDER_SET_CONTEXT_MGR already set
18:34:03 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, 0x0)

18:34:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000400000010a00000006"])

[ 1083.188317][ T3037] binder_release_work: 9 callbacks suppressed
[ 1083.188323][ T3037] binder: undelivered TRANSACTION_ERROR: 29201
[ 1083.208711][T19519] binder: 19518:19519 ioctl 40046207 0 returned -16
[ 1083.224877][ T3037] binder: undelivered TRANSACTION_ERROR: 29189
18:34:03 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x12000000, 0x0, 0x0})

18:34:03 executing program 1:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x6040, 0x0)

18:34:03 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x6ea80200})

18:34:03 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\xff\xff\xfe\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1083.390974][T19715] binder_transaction: 9 callbacks suppressed
[ 1083.390992][T19715] binder: 19713:19715 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
[ 1083.507336][T19715] binder: 19713:19715 ioctl c0306201 20000440 returned -14
18:34:03 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000800000010a00000006"])

18:34:03 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
nanosleep(&(0x7f0000000100), &(0x7f0000000180))

18:34:03 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00@\x00'}})

[ 1083.548360][T19756] binder_alloc: binder_alloc_mmap_handler: 19713 20001000-20004000 already mapped failed -16
18:34:04 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1083.660710][T19715] binder: BINDER_SET_CONTEXT_MGR already set
[ 1083.674524][T19756] binder_alloc: 19713: binder_alloc_buf, no vma
[ 1083.693863][T19715] binder: 19713:19715 ioctl 40046207 0 returned -16
18:34:04 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00@\x00'}})

[ 1083.718728][T19756] binder: 19713:19756 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
[ 1083.743616][ T3037] binder: undelivered TRANSACTION_ERROR: 29201
[ 1083.747080][T19756] binder: 19713:19756 ioctl c0306201 20000440 returned -14
[ 1083.762785][ T3037] binder: undelivered TRANSACTION_ERROR: 29189
18:34:04 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x20000000, 0x0, 0x0})

18:34:04 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x6fa80200})

18:34:04 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000020a00000006"])

18:34:04 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, 0x0, 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1083.859566][T19885] binder: 19882:19885 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
[ 1083.918125][T19885] binder: 19882:19885 ioctl c0306201 20000440 returned -14
18:34:04 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1083.964094][T19895] binder_alloc: binder_alloc_mmap_handler: 19882 20001000-20004000 already mapped failed -16
[ 1083.989554][T19885] binder: BINDER_SET_CONTEXT_MGR already set
18:34:04 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00@\x00'}})

[ 1084.014398][T19885] binder: 19882:19885 ioctl 40046207 0 returned -16
18:34:04 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\xfe\xff\xff\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:04 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1084.093570][T19895] binder_alloc: 19882: binder_alloc_buf, no vma
[ 1084.099960][T15722] binder: undelivered TRANSACTION_ERROR: 29201
[ 1084.115974][T19895] binder: 19882:19895 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
18:34:04 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00@\x00'}})

[ 1084.171073][T19895] binder: 19882:19895 ioctl c0306201 20000440 returned -14
[ 1084.208642][ T7825] binder: undelivered TRANSACTION_ERROR: 29189
18:34:04 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000800000080a00000006"])

18:34:04 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x48000000, 0x0, 0x0})

18:34:04 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x80120000})

18:34:04 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00@\x00'}})

[ 1084.369011][T20026] binder: 20025:20026 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
18:34:04 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1084.429084][T20026] binder: 20025:20026 ioctl c0306201 20000440 returned -14
[ 1084.487736][T20035] binder_alloc: binder_alloc_mmap_handler: 20025 20001000-20004000 already mapped failed -16
[ 1084.555975][T20026] binder: BINDER_SET_CONTEXT_MGR already set
[ 1084.585301][T20026] binder: 20025:20026 ioctl 40046207 0 returned -16
[ 1084.585414][T20059] binder_alloc: 20025: binder_alloc_buf, no vma
18:34:04 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff040400000000000d0a00000006"])

18:34:04 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00\x00\x00\x00\x00@\x00'}})

[ 1084.604873][T20059] binder: 20025:20059 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
[ 1084.682653][ T7825] binder: undelivered TRANSACTION_ERROR: 29201
[ 1084.712213][T20059] binder: 20025:20059 ioctl c0306201 20000440 returned -14
18:34:05 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1084.743847][ T7825] binder: undelivered TRANSACTION_ERROR: 29189
18:34:05 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x4c000000, 0x0, 0x0})

18:34:05 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\xc0\x00\x00\x00\x00\x00@\x00'}})

[ 1084.900529][T20240] binder: 20238:20240 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
18:34:05 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xe4ffffff})

18:34:05 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:05 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000010000400a00000006"])

[ 1084.982245][T20240] binder: 20238:20240 ioctl c0306201 20000440 returned -14
[ 1085.051044][T20264] binder_alloc: binder_alloc_mmap_handler: 20238 20001000-20004000 already mapped failed -16
[ 1085.089384][T20264] binder_alloc: 20238: binder_alloc_buf, no vma
18:34:05 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\xfe\xff\xff\x00\x00\x00\x00\x00@\x00'}})

[ 1085.111596][T20240] binder: BINDER_SET_CONTEXT_MGR already set
[ 1085.162403][T20264] binder: 20238:20264 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
[ 1085.170952][T20240] binder: 20238:20240 ioctl 40046207 0 returned -16
[ 1085.185501][    T5] binder: undelivered TRANSACTION_ERROR: 29201
18:34:05 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000080000800a00000006"])

18:34:05 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x8d\xff\xff\xff\x00\x00\x00\x00\x00@\x00'}})

18:34:05 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1085.318665][T20264] binder: 20238:20264 ioctl c0306201 20000440 returned -14
[ 1085.391404][ T3037] binder: undelivered TRANSACTION_ERROR: 29189
18:34:05 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x60000000, 0x0, 0x0})

18:34:05 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:05 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xf0ffffff})

18:34:05 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00\x00\x00\x00\x00@\x00'}})

[ 1085.568003][T20494] binder: 20492:20494 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
18:34:06 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x7f\x00\x00\x00@\x00'}})

18:34:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000fffffdfd0a00000006"])

[ 1085.643558][T20494] binder: 20492:20494 ioctl c0306201 20000440 returned -14
18:34:06 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1085.721082][T20538] binder_alloc: binder_alloc_mmap_handler: 20492 20001000-20004000 already mapped failed -16
18:34:06 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:06 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\xf0\x00\x00@\x00'}})

[ 1085.766380][T20494] binder: BINDER_SET_CONTEXT_MGR already set
[ 1085.802390][T20536] binder_alloc: 20492: binder_alloc_buf, no vma
18:34:06 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00@\x00'}})

[ 1085.879265][T20494] binder: 20492:20494 ioctl 40046207 0 returned -16
[ 1085.910388][T20536] binder: 20492:20536 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
18:34:06 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xf4ffffff})

18:34:06 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00@\x00'}})

[ 1085.992945][T20536] binder: 20492:20536 ioctl c0306201 20000440 returned -14
18:34:06 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x68000000, 0x0, 0x0})

18:34:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff040400000080ffff0a00000006"])

18:34:06 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfe\x00\x00@\x00'}})

18:34:06 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\xf0\x00\x00@\x00'}})

18:34:06 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00@\x00'}})

18:34:06 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:06 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00@\x00'}})

[ 1086.257042][T20674] binder: 20655:20674 ioctl c0306201 20000440 returned -14
18:34:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000fdfdffff0a00000006"])

18:34:06 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)

[ 1086.332399][T20713] binder_alloc: binder_alloc_mmap_handler: 20655 20001000-20004000 already mapped failed -16
18:34:06 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)

[ 1086.406444][T20674] binder_alloc: 20655: binder_alloc_buf, no vma
[ 1086.437187][T20674] binder: 20655:20674 ioctl c0306201 20000440 returned -14
18:34:06 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xfdfdffff})

18:34:06 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x6c000000, 0x0, 0x0})

18:34:06 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00@\x00'}})

[ 1086.567653][T20771] binder: 20770:20771 ioctl c0306201 20000440 returned -14
[ 1086.649742][T20776] binder_alloc: binder_alloc_mmap_handler: 20770 20001000-20004000 already mapped failed -16
[ 1086.725317][T20771] binder: BINDER_SET_CONTEXT_MGR already set
18:34:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000100000006"])

[ 1086.756035][T20775] binder_alloc: 20770: binder_alloc_buf, no vma
[ 1086.783875][T20771] binder: 20770:20771 ioctl 40046207 0 returned -16
[ 1086.805939][T20775] binder: 20770:20775 ioctl c0306201 20000440 returned -14
18:34:07 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x74000000, 0x0, 0x0})

18:34:07 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00@\x00'}})

18:34:07 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xfeffffff})

[ 1087.004218][T20889] binder: 20887:20889 ioctl c0306201 20000440 returned -14
18:34:07 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)

18:34:07 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00@\x00'}})

[ 1087.085877][T20892] binder_alloc: binder_alloc_mmap_handler: 20887 20001000-20004000 already mapped failed -16
[ 1087.142593][T20889] binder: BINDER_SET_CONTEXT_MGR already set
[ 1087.157996][T20889] binder: 20887:20889 ioctl 40046207 0 returned -16
[ 1087.175263][T20900] binder_alloc: 20887: binder_alloc_buf, no vma
18:34:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000004000000100000006"])

[ 1087.196331][T20900] binder: 20887:20900 ioctl c0306201 20000440 returned -14
18:34:07 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)

18:34:07 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00@\x00'}})

18:34:07 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x7a000000, 0x0, 0x0})

18:34:07 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00@\x00'}})

18:34:07 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xff010000})

[ 1087.467688][T21017] binder: 21016:21017 ioctl c0306201 20000440 returned -14
[ 1087.535314][T21024] binder_alloc: binder_alloc_mmap_handler: 21016 20001000-20004000 already mapped failed -16
18:34:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000008000000100000006"])

18:34:07 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\x00@\x00'}})

[ 1087.608044][T21017] binder: BINDER_SET_CONTEXT_MGR already set
[ 1087.622386][T21017] binder: 21016:21017 ioctl 40046207 0 returned -16
[ 1087.646275][T21024] binder_alloc: 21016: binder_alloc_buf, no vma
[ 1087.710168][T21024] binder: 21016:21024 ioctl c0306201 20000440 returned -14
18:34:08 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)

18:34:08 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0xfdfdffff, 0x0, 0x0})

18:34:08 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000700000006"])

18:34:08 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xff0f0000})

[ 1087.924766][T21139] binder: 21137:21139 ioctl c0306201 20000440 returned -14
[ 1087.991820][T21149] binder_alloc: binder_alloc_mmap_handler: 21137 20001000-20004000 already mapped failed -16
[ 1088.076728][T21139] binder: BINDER_SET_CONTEXT_MGR already set
18:34:08 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)

18:34:08 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000008000000800000006"])

[ 1088.162564][T21139] binder: 21137:21139 ioctl 40046207 0 returned -16
[ 1088.174274][T21160] binder_alloc: 21137: binder_alloc_buf, no vma
[ 1088.181285][T21160] binder: 21137:21160 ioctl c0306201 20000440 returned -14
[ 1088.235643][ T3037] binder_release_work: 10 callbacks suppressed
[ 1088.235652][ T3037] binder: undelivered TRANSACTION_ERROR: 29201
[ 1088.312198][ T7825] binder: undelivered TRANSACTION_ERROR: 29189
18:34:08 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0xfffffdfd, 0x0, 0x0})

18:34:08 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)

18:34:08 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:08 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xfffffdfd})

[ 1088.567716][T21269] binder_transaction: 10 callbacks suppressed
[ 1088.567736][T21269] binder: 21268:21269 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
18:34:09 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1088.630897][T21269] binder: 21268:21269 ioctl c0306201 20000440 returned -14
[ 1088.678874][T21279] binder_alloc: binder_alloc_mmap_handler: 21268 20001000-20004000 already mapped failed -16
18:34:09 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\xc0\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:09 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1088.761482][T21269] binder_alloc: 21268: binder_alloc_buf, no vma
[ 1088.772537][T21292] binder: BINDER_SET_CONTEXT_MGR already set
[ 1088.778559][T21292] binder: 21268:21292 ioctl 40046207 0 returned -16
[ 1088.808533][T21269] binder: 21268:21269 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
[ 1088.822126][ T3037] binder: undelivered TRANSACTION_ERROR: 29201
18:34:09 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000200000a00000006"])

18:34:09 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\xc0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1088.957895][T21269] binder: 21268:21269 ioctl c0306201 20000440 returned -14
18:34:09 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:09 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x100000000000000, 0x0, 0x0})

[ 1089.016402][ T3037] binder: undelivered TRANSACTION_ERROR: 29189
18:34:09 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:09 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xffffffe4})

[ 1089.180274][T21405] binder: 21401:21405 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
18:34:09 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)

18:34:09 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:09 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:09 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000d00000a00000006"])

[ 1089.328910][T21405] binder: 21401:21405 ioctl c0306201 20000440 returned -14
[ 1089.398054][T21405] binder_alloc: binder_alloc_mmap_handler: 21401 20001000-20004000 already mapped failed -16
[ 1089.412436][T21402] binder: BINDER_SET_CONTEXT_MGR already set
[ 1089.418570][T21402] binder: 21401:21402 ioctl 40046207 0 returned -16
[ 1089.476048][ T3037] binder: undelivered TRANSACTION_ERROR: 29201
18:34:09 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00@\x00'}})

18:34:09 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x200000000000000, 0x0, 0x0})

18:34:10 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xfffffff0})

18:34:10 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00@\x00'}})

18:34:10 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff0404000000000d000a00000006"])

18:34:10 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\xfe\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1089.761753][T21540] binder: 21538:21540 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
18:34:10 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\xff\xff\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1089.817996][T21540] binder: 21538:21540 ioctl c0306201 20000440 returned -14
[ 1089.844961][T21576] binder_alloc: binder_alloc_mmap_handler: 21538 20001000-20004000 already mapped failed -16
18:34:10 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1089.887546][T21540] binder: BINDER_SET_CONTEXT_MGR already set
[ 1089.920615][T21540] binder: 21538:21540 ioctl 40046207 0 returned -16
18:34:10 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\xc0\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000d00000006"])

[ 1089.972598][T15722] binder: undelivered TRANSACTION_ERROR: 29201
[ 1089.980092][T21576] binder_alloc: 21538: binder_alloc_buf, no vma
[ 1090.002945][T21576] binder: 21538:21576 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
18:34:10 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00\x00\x00\x00\x00@\x00'}})

18:34:10 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xfffffff4})

18:34:10 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x300000000000000, 0x0, 0x0})

[ 1090.067000][T21576] binder: 21538:21576 ioctl c0306201 20000440 returned -14
[ 1090.089598][ T3037] binder: undelivered TRANSACTION_ERROR: 29189
18:34:10 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00@\x00'}})

18:34:10 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\xff\xff\xfe\x00\x00\x00\x00\x00@\x00'}})

[ 1090.225660][T21679] binder: 21678:21679 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
18:34:10 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\xc0\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:10 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00@\x00'}})

[ 1090.278480][T21679] binder: 21678:21679 ioctl c0306201 20000440 returned -14
[ 1090.331823][T21699] binder_alloc: binder_alloc_mmap_handler: 21678 20001000-20004000 already mapped failed -16
18:34:10 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00@\x00'}})

[ 1090.375396][T21679] binder: BINDER_SET_CONTEXT_MGR already set
18:34:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000002000a00000006"])

[ 1090.442583][T21679] binder: 21678:21679 ioctl 40046207 0 returned -16
18:34:10 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\xff\xff\xfe\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:10 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x7f\xff\xff\xff\xf0\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1090.496875][T21784] binder_alloc: 21678: binder_alloc_buf, no vma
18:34:10 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00@\x00'}})

[ 1090.548882][T21784] binder: 21678:21784 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
[ 1090.583119][ T7825] binder: undelivered TRANSACTION_ERROR: 29201
18:34:10 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xfffffffe})

[ 1090.599617][T21784] binder: 21678:21784 ioctl c0306201 20000440 returned -14
[ 1090.652383][ T7825] binder: undelivered TRANSACTION_ERROR: 29189
18:34:11 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\xfe\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:11 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x400000000000000, 0x0, 0x0})

18:34:11 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x7f\xff\xff\xff\xf0\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:11 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00@\x00'}})

18:34:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff0404000000000d000a00000006"])

[ 1090.800340][T21818] binder: 21817:21818 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
18:34:11 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1090.902656][T21818] binder: 21817:21818 ioctl c0306201 20000440 returned -14
18:34:11 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1090.948280][T21873] binder_alloc: binder_alloc_mmap_handler: 21817 20001000-20004000 already mapped failed -16
18:34:11 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00@\x00'}})

[ 1091.022372][T21818] binder: BINDER_SET_CONTEXT_MGR already set
18:34:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff040400000000000d0a00000006"])

[ 1091.064546][T21818] binder: 21817:21818 ioctl 40046207 0 returned -16
18:34:11 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x1000000000000})

18:34:11 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\xff\xff\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1091.129611][ T3037] binder: undelivered TRANSACTION_ERROR: 29201
18:34:11 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\xff\xff\xff\x8d\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:11 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x500000000000000, 0x0, 0x0})

18:34:11 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00@\x00'}})

[ 1091.307370][T21955] binder: 21954:21955 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
18:34:11 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00@\x00'}})

18:34:11 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00\x00\x00\x00@\x00'}})

18:34:11 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\xff\xff\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1091.372224][T21955] binder: 21954:21955 ioctl c0306201 20000440 returned -14
[ 1091.395436][T22000] binder_alloc: binder_alloc_mmap_handler: 21954 20001000-20004000 already mapped failed -16
18:34:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000700000006"])

[ 1091.458184][T21955] binder: BINDER_SET_CONTEXT_MGR already set
18:34:11 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00@\x00'}})

[ 1091.518538][T21955] binder: 21954:21955 ioctl 40046207 0 returned -16
[ 1091.518777][T22047] binder_alloc: 21954: binder_alloc_buf, no vma
18:34:11 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\xff\xff\xff\x8d\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:11 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x4000000000000})

[ 1091.560788][T22047] binder: 21954:22047 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
18:34:12 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\x00\x00\x00\x00@\x00'}})

18:34:12 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1091.711209][T22047] binder: 21954:22047 ioctl c0306201 20000440 returned -14
18:34:12 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:12 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x600000000000000, 0x0, 0x0})

18:34:12 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:12 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\x00\x00\x00\x00@\x00'}})

18:34:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000020a00000006"])

[ 1091.968609][T22176] binder: 22175:22176 ioctl c0306201 20000440 returned -14
18:34:12 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1092.018734][T22211] binder_alloc: binder_alloc_mmap_handler: 22175 20001000-20004000 already mapped failed -16
18:34:12 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x10000000000000})

18:34:12 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x8d\xff\xff\xff\x00\x00\x00\x00@\x00'}})

18:34:12 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\xff\xff\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1092.067662][T22176] binder: BINDER_SET_CONTEXT_MGR already set
[ 1092.095218][T22176] binder: 22175:22176 ioctl 40046207 0 returned -16
18:34:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff040400000000000d0a00000006"])

[ 1092.172669][T22222] binder_alloc: 22175: binder_alloc_buf, no vma
[ 1092.185050][T22222] binder: 22175:22222 ioctl c0306201 20000440 returned -14
18:34:12 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0xfffffffffffffffd, 0x10000)
ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f00000001c0)=""/99)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x5, 0x5, 0x5, 0xffffffffffffffbe, 0x9})
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
r5 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x0, 0x0)
ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000140)=0x1)
ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040))

18:34:12 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x700000000000000, 0x0, 0x0})

18:34:12 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x7f\x00\x00@\x00'}})

18:34:12 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1092.407362][T22226] could not allocate digest TFM handle crc32-genericÿÿþ
[ 1092.428862][T22286] binder: 22269:22286 ioctl c0306201 20000440 returned -14
18:34:12 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\xc0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1092.456011][T22328] binder_alloc: binder_alloc_mmap_handler: 22269 20001000-20004000 already mapped failed -16
18:34:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000d00000006"])

18:34:12 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x80000000000000})

[ 1092.506561][T22286] binder: BINDER_SET_CONTEXT_MGR already set
[ 1092.546560][T22286] binder: 22269:22286 ioctl 40046207 0 returned -16
[ 1092.564913][T22328] binder_alloc: 22269: binder_alloc_buf, no vma
[ 1092.571383][T22328] binder: 22269:22328 ioctl c0306201 20000440 returned -14
18:34:12 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\xf0\x00@\x00'}})

18:34:13 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:13 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x1200000000000000, 0x0, 0x0})

[ 1092.827289][T22356] could not allocate digest TFM handle crc32-genericÀ
[ 1092.828657][T22391] binder: 22381:22391 ioctl c0306201 20000440 returned -14
18:34:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000700000006"])

18:34:13 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfe\x00@\x00'}})

18:34:13 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\xf0\x00@\x00'}})

[ 1092.870742][T22427] binder_alloc: binder_alloc_mmap_handler: 22381 20001000-20004000 already mapped failed -16
[ 1092.910561][T22391] binder: BINDER_SET_CONTEXT_MGR already set
[ 1092.950849][T22391] binder: 22381:22391 ioctl 40046207 0 returned -16
[ 1092.959905][T22370] could not allocate digest TFM handle crc32-generic
18:34:13 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x100000000000000})

[ 1093.010146][T22427] binder: 22381:22427 ioctl c0306201 20000440 returned -14
18:34:13 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\xf0\x00@\x00'}})

18:34:13 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01@\x00'}})

18:34:13 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\xf0\x00@\x00'}})

18:34:13 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x2000000000000000, 0x0, 0x0})

18:34:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000d00000006"])

18:34:13 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02@\x00'}})

[ 1093.288540][T22536] binder: 22535:22536 ioctl c0306201 20000440 returned -14
18:34:13 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1093.378389][T22571] binder_alloc: binder_alloc_mmap_handler: 22535 20001000-20004000 already mapped failed -16
[ 1093.410403][T22570] binder_alloc: 22535: binder_alloc_buf, no vma
18:34:13 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x19, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000100004006"])

[ 1093.482557][ T3037] binder_release_work: 8 callbacks suppressed
[ 1093.482563][ T3037] binder: undelivered TRANSACTION_ERROR: 29201
[ 1093.486943][T22536] binder: BINDER_SET_CONTEXT_MGR already set
18:34:13 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05@\x00'}})

18:34:13 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x200000000000000})

[ 1093.531161][T22570] binder: 22535:22570 ioctl c0306201 20000440 returned -14
[ 1093.577797][T22536] binder: 22535:22536 ioctl 40046207 0 returned -16
[ 1093.608490][T22596] could not allocate digest TFM handle crc32-generic
18:34:14 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x16, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1093.635501][T15722] binder: undelivered TRANSACTION_ERROR: 29189
18:34:14 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x4800000000000000, 0x0, 0x0})

18:34:14 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0xe, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:14 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f@\x00'}})

18:34:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000800008006"])

18:34:14 executing program 4 (fault-call:4 fault-nth:0):
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1093.839457][T22685] binder_transaction: 8 callbacks suppressed
[ 1093.839488][T22685] binder: 22683:22685 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
18:34:14 executing program 1 (fault-call:6 fault-nth:0):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

18:34:14 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@@\x00'}})

[ 1093.971758][T22685] binder: 22683:22685 ioctl c0306201 20000440 returned -14
[ 1094.011666][T22755] FAULT_INJECTION: forcing a failure.
[ 1094.011666][T22755] name failslab, interval 1, probability 0, space 0, times 0
[ 1094.034208][T22762] binder_alloc: binder_alloc_mmap_handler: 22683 20001000-20004000 already mapped failed -16
[ 1094.035475][T22759] FAULT_INJECTION: forcing a failure.
[ 1094.035475][T22759] name failslab, interval 1, probability 0, space 0, times 0
[ 1094.065265][T22685] binder: BINDER_SET_CONTEXT_MGR already set
[ 1094.071585][T22755] CPU: 1 PID: 22755 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190301 #1
[ 1094.081126][T22755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1094.091180][T22755] Call Trace:
[ 1094.091268][T22755]  dump_stack+0x172/0x1f0
[ 1094.091293][T22755]  should_fail.cold+0xa/0x15
[ 1094.097736][T22685] binder: 22683:22685 ioctl 40046207 0 returned -16
[ 1094.098902][T22755]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1094.098924][T22755]  ? ___might_sleep+0x163/0x280
[ 1094.098952][T22755]  __should_failslab+0x121/0x190
[ 1094.110106][T22755]  should_failslab+0x9/0x14
[ 1094.110123][T22755]  __kmalloc+0x2dc/0x740
[ 1094.110140][T22755]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1094.110160][T22755]  ? _kstrtoull+0x14c/0x200
[ 1094.119417][    T5] binder: undelivered TRANSACTION_ERROR: 29201
[ 1094.120791][T22755]  ? _parse_integer+0x190/0x190
[ 1094.120811][T22755]  ? rw_copy_check_uvector+0x28c/0x330
[ 1094.120843][T22755]  rw_copy_check_uvector+0x28c/0x330
[ 1094.120869][T22755]  import_iovec+0xbf/0x200
[ 1094.129198][T22762] binder_alloc: 22683: binder_alloc_buf, no vma
[ 1094.130322][T22755]  ? dup_iter+0x260/0x260
[ 1094.130348][T22755]  vfs_writev+0xcb/0x2f0
[ 1094.130374][T22755]  ? vfs_iter_write+0xb0/0xb0
[ 1094.140843][T22755]  ? kasan_check_read+0x11/0x20
[ 1094.140895][T22755]  ? mutex_trylock+0x1e0/0x1e0
[ 1094.140945][T22755]  ? __fget+0x381/0x550
[ 1094.148542][T22762] binder: 22683:22762 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
[ 1094.151578][T22755]  ? ksys_dup3+0x3e0/0x3e0
[ 1094.151601][T22755]  ? wait_for_completion+0x440/0x440
[ 1094.151626][T22755]  ? mutex_lock_nested+0x16/0x20
[ 1094.151654][T22755]  do_writev+0xf6/0x290
[ 1094.161957][T22755]  ? vfs_writev+0x2f0/0x2f0
[ 1094.161989][T22755]  ? do_syscall_64+0x26/0x610
[ 1094.162005][T22755]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1094.162020][T22755]  ? do_syscall_64+0x26/0x610
[ 1094.162041][T22755]  __x64_sys_writev+0x75/0xb0
[ 1094.162060][T22755]  do_syscall_64+0x103/0x610
18:34:14 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x284000000000000})

[ 1094.162084][T22755]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1094.182288][T22762] binder: 22683:22762 ioctl c0306201 20000440 returned -14
[ 1094.190995][    T5] binder: undelivered TRANSACTION_ERROR: 29189
[ 1094.191196][T22755] RIP: 0033:0x457e29
[ 1094.239498][T22755] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1094.239508][T22755] RSP: 002b:00007f696524fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 1094.239522][T22755] RAX: ffffffffffffffda RBX: 00007f696524fc90 RCX: 0000000000457e29
[ 1094.239531][T22755] RDX: 200000000000014c RSI: 00000000200000c0 RDI: 0000000000000005
[ 1094.239546][T22755] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1094.250270][T22755] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f69652506d4
[ 1094.250280][T22755] R13: 00000000004c4960 R14: 00000000004dd118 R15: 0000000000000006
[ 1094.277507][T22759] CPU: 0 PID: 22759 Comm: syz-executor.1 Not tainted 5.0.0-rc8-next-20190301 #1
[ 1094.277535][T22759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1094.296451][T22766] binder: 22765:22766 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
[ 1094.307159][T22759] Call Trace:
[ 1094.307194][T22759]  dump_stack+0x172/0x1f0
[ 1094.307215][T22759]  should_fail.cold+0xa/0x15
[ 1094.307233][T22759]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1094.307257][T22759]  ? ___might_sleep+0x163/0x280
[ 1094.323672][T22759]  __should_failslab+0x121/0x190
[ 1094.323690][T22759]  should_failslab+0x9/0x14
[ 1094.323705][T22759]  __kmalloc_track_caller+0x2d8/0x740
[ 1094.323745][T22759]  ? msr_io+0xf6/0x2e0
[ 1094.323766][T22759]  memdup_user+0x26/0xb0
[ 1094.339703][T22759]  msr_io+0xf6/0x2e0
[ 1094.348178][T22766] binder: 22765:22766 ioctl c0306201 20000440 returned -14
[ 1094.355623][T22759]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1094.355644][T22759]  ? do_get_msr+0x150/0x150
[ 1094.355662][T22759]  ? emulator_set_hflags+0xa0/0xa0
[ 1094.355677][T22759]  ? lock_acquire+0x16f/0x3f0
[ 1094.355694][T22759]  ? kvm_arch_vcpu_ioctl+0x578/0x2fc0
[ 1094.355717][T22759]  kvm_arch_vcpu_ioctl+0x5c7/0x2fc0
[ 1094.374773][T22759]  ? kvm_arch_vcpu_ioctl+0x578/0x2fc0
[ 1094.374796][T22759]  ? kvm_arch_vcpu_put+0x460/0x460
[ 1094.374813][T22759]  ? mark_held_locks+0xf0/0xf0
[ 1094.374830][T22759]  ? is_bpf_text_address+0xac/0x170
[ 1094.374860][T22759]  ? find_held_lock+0x35/0x130
[ 1094.391368][T22767] binder_alloc: binder_alloc_mmap_handler: 22765 20001000-20004000 already mapped failed -16
[ 1094.393924][T22759]  ? lock_acquire+0x16f/0x3f0
[ 1094.393963][T22759]  ? kvm_vcpu_ioctl+0x181/0xfa0
[ 1094.393989][T22759]  ? __mutex_lock+0x3cd/0x1310
[ 1094.415505][T22766] binder: BINDER_SET_CONTEXT_MGR already set
[ 1094.418681][T22759]  ? kvm_vcpu_ioctl+0x181/0xfa0
[ 1094.418720][T22759]  ? mutex_trylock+0x1e0/0x1e0
[ 1094.418741][T22759]  ? _parse_integer+0x139/0x190
[ 1094.450014][T22767] binder_alloc: 22765: binder_alloc_buf, no vma
[ 1094.454163][T22759]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1094.454179][T22759]  ? _kstrtoull+0x14c/0x200
[ 1094.454193][T22759]  ? _parse_integer+0x190/0x190
18:34:14 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x4c00000000000000, 0x0, 0x0})

18:34:14 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x6000000000000000, 0x0, 0x0})

[ 1094.454235][T22759]  ? __lock_acquire+0x548/0x3fb0
[ 1094.454260][T22759]  kvm_vcpu_ioctl+0x8f6/0xfa0
[ 1094.468050][T15722] binder: undelivered TRANSACTION_ERROR: 29201
[ 1094.469416][T22759]  ? kvm_vcpu_block+0xce0/0xce0
[ 1094.469452][T22759]  ? tomoyo_path_number_perm+0x263/0x520
[ 1094.469473][T22759]  ? find_held_lock+0x35/0x130
[ 1094.475154][T22767] binder: 22765:22767 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
[ 1094.480030][T22759]  ? tomoyo_execute_permission+0x4a0/0x4a0
18:34:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d@\x00'}})

18:34:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000001"])

[ 1094.480059][T22759]  ? __fget+0x35a/0x550
[ 1094.480082][T22759]  ? kvm_vcpu_block+0xce0/0xce0
[ 1094.485781][T22766] binder: 22765:22766 ioctl 40046207 0 returned -16
[ 1094.489936][T22759]  do_vfs_ioctl+0xd6e/0x1390
[ 1094.489958][T22759]  ? ioctl_preallocate+0x210/0x210
[ 1094.489980][T22759]  ? __fget+0x381/0x550
[ 1094.495677][T22767] binder: 22765:22767 ioctl c0306201 20000440 returned -14
[ 1094.499945][T22759]  ? ksys_dup3+0x3e0/0x3e0
[ 1094.499962][T22759]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1094.499981][T22759]  ? fput_many+0x12c/0x1a0
[ 1094.511001][T15722] binder: undelivered TRANSACTION_ERROR: 29189
[ 1094.514795][T22759]  ? tomoyo_file_ioctl+0x23/0x30
[ 1094.514814][T22759]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1094.514844][T22759]  ? security_file_ioctl+0x93/0xc0
[ 1094.514866][T22759]  ksys_ioctl+0xab/0xd0
[ 1094.514886][T22759]  __x64_sys_ioctl+0x73/0xb0
[ 1094.551104][T22759]  do_syscall_64+0x103/0x610
[ 1094.582417][T22759]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1094.582430][T22759] RIP: 0033:0x457e29
[ 1094.582458][T22759] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1094.582465][T22759] RSP: 002b:00007f48ed0edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1094.582480][T22759] RAX: ffffffffffffffda RBX: 00007f48ed0edc90 RCX: 0000000000457e29
[ 1094.582496][T22759] RDX: 0000000020000040 RSI: 000000004008ae89 RDI: 0000000000000005
18:34:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0@\x00'}})

[ 1094.603513][T22771] binder: 22770:22771 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
[ 1094.609056][T22759] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1094.609066][T22759] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f48ed0ee6d4
[ 1094.609074][T22759] R13: 00000000004c0ee8 R14: 00000000004d2d68 R15: 0000000000000007
[ 1094.691320][T22771] binder: 22770:22771 ioctl c0306201 20000440 returned -14
[ 1094.828456][T22855] binder_alloc: binder_alloc_mmap_handler: 22770 20001000-20004000 already mapped failed -16
[ 1094.859228][T22771] binder: BINDER_SET_CONTEXT_MGR already set
[ 1094.868269][T22771] binder: 22770:22771 ioctl 40046207 0 returned -16
[ 1094.888743][T22855] binder_alloc: 22770: binder_alloc_buf, no vma
18:34:15 executing program 1 (fault-call:6 fault-nth:1):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

18:34:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a02000006"])

[ 1094.936639][T15722] binder: undelivered TRANSACTION_ERROR: 29201
[ 1094.943757][T22855] binder: 22770:22855 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
[ 1095.020164][T22855] binder: 22770:22855 ioctl c0306201 20000440 returned -14
18:34:15 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00@\x00'}})

[ 1095.066665][T15722] binder: undelivered TRANSACTION_ERROR: 29189
18:34:15 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x6800000000000000, 0x0, 0x0})

18:34:15 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

18:34:15 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x300000000000000})

18:34:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a0d000006"])

18:34:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:15 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x2000000000000002)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1095.368928][T23009] binder: 23000:23009 transaction failed 29189/-22, size -2549729600380862440-8357212777111033060 line 2994
18:34:15 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0x2, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

[ 1095.440206][T23009] binder: 23000:23009 ioctl c0306201 20000440 returned -14
[ 1095.461103][    T5] binder: undelivered TRANSACTION_ERROR: 29189
18:34:15 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x6c00000000000000, 0x0, 0x0})

18:34:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a000d0006"])

[ 1095.645619][T23159] binder: 23155:23159 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
[ 1095.692194][T23159] binder: 23155:23159 ioctl c0306201 20000440 returned -14
18:34:16 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0x5421, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

[ 1095.743239][T23236] binder_alloc: binder_alloc_mmap_handler: 23155 20001000-20004000 already mapped failed -16
18:34:16 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x400000000000000})

[ 1095.788379][T23159] binder: BINDER_SET_CONTEXT_MGR already set
[ 1095.822388][T23159] binder: 23155:23159 ioctl 40046207 0 returned -16
18:34:16 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x2000000000000003)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:16 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\xc0\x00\x00\x00\x00\x00\x00@\x00'}})

18:34:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00020006"])

[ 1095.842705][T23246] binder_alloc: 23155: binder_alloc_buf, no vma
[ 1095.875053][T23246] binder: 23155:23246 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
[ 1095.953021][T23246] binder: 23155:23246 ioctl c0306201 20000440 returned -14
[ 1095.982242][ T3037] binder: undelivered TRANSACTION_ERROR: 29201
18:34:16 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00@\x00'}})

18:34:16 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0x5450, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

18:34:16 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x7400000000000000, 0x0, 0x0})

18:34:16 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x500000000000000})

18:34:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a000d0006"])

[ 1096.173427][T23426] binder: 23423:23426 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
[ 1096.212109][T23426] binder: 23423:23426 ioctl c0306201 20000440 returned -14
18:34:16 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00@\x00'}})

18:34:16 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x2000000000000004)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1096.293887][T23482] binder_alloc: binder_alloc_mmap_handler: 23423 20001000-20004000 already mapped failed -16
18:34:16 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0x5451, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

[ 1096.425393][T23426] binder: BINDER_SET_CONTEXT_MGR already set
18:34:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000d06"])

18:34:16 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00@\x00'}})

[ 1096.482727][T23426] binder: 23423:23426 ioctl 40046207 0 returned -16
18:34:16 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x7a00000000000000, 0x0, 0x0})

18:34:17 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x600000000000000})

18:34:17 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0x5452, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

18:34:17 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\xc0\x00\x00\x00\x00\x00@\x00'}})

[ 1096.749152][T23726] binder: 23703:23726 ioctl c0306201 20000440 returned -14
18:34:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000206"])

18:34:17 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x2000000000000005)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1096.817213][T23748] binder_alloc: binder_alloc_mmap_handler: 23703 20001000-20004000 already mapped failed -16
[ 1096.899122][T23748] binder_alloc: 23703: binder_alloc_buf, no vma
[ 1096.960005][T23748] binder: 23703:23748 ioctl c0306201 20000440 returned -14
18:34:17 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0xfdfdffff00000000, 0x0, 0x0})

18:34:17 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfe\x00\x00\x00\x00@\x00'}})

18:34:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000d06"])

18:34:17 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x700000000000000})

18:34:17 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0x5460, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

[ 1097.120712][T23890] binder: 23883:23890 ioctl c0306201 20000440 returned -14
[ 1097.193505][T23935] binder_alloc: binder_alloc_mmap_handler: 23883 20001000-20004000 already mapped failed -16
18:34:17 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x2000000000000006)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1097.238530][T23890] binder: BINDER_SET_CONTEXT_MGR already set
[ 1097.257434][T23890] binder: 23883:23890 ioctl 40046207 0 returned -16
[ 1097.273831][T23949] binder_alloc: 23883: binder_alloc_buf, no vma
18:34:17 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00@\x00'}})

[ 1097.300298][T23949] binder: 23883:23949 ioctl c0306201 20000440 returned -14
18:34:17 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x0, 0x2, 0x0})

18:34:17 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x2000000000000007)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:17 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0xae80, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

18:34:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001b700fff0ffff04040000000000000a00000006000000000000000000"])
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80, 0x0)
write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000040)={0xe, 0x7, 0x7, 0x1, 0x33, "d486b2a2839ca3e9020ba364d7a2ba50c266f3a50279ceaa8f59ba70e873d63e22fd618aee6be770da81af2a30b164c11c088e"}, 0x3f)
r4 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, r4)

[ 1097.437295][T24083] binder_alloc: binder_alloc_mmap_handler: 24052 20001000-20004000 already mapped failed -16
[ 1097.458891][T24068] binder: BINDER_SET_CONTEXT_MGR already set
[ 1097.498206][T24068] binder: 24052:24068 ioctl 40046207 0 returned -16
18:34:17 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00@\x00'}})

18:34:17 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x0, 0x3, 0x0})

18:34:18 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x800000000000000})

18:34:18 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00@\x00'}})

[ 1097.719535][T24231] binder_alloc: binder_alloc_mmap_handler: 24213 20001000-20004000 already mapped failed -16
[ 1097.754946][T24221] binder: BINDER_SET_CONTEXT_MGR already set
18:34:18 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0xae9a, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

18:34:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])
write$eventfd(r0, &(0x7f0000000000)=0x5f6e, 0x8)

[ 1097.785541][T24231] binder_alloc: 24213: binder_alloc_buf, no vma
[ 1097.812704][T24221] binder: 24213:24221 ioctl 40046207 0 returned -16
18:34:18 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x2000000000000008)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:18 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x0, 0x4, 0x0})

18:34:18 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00@\x00'}})

18:34:18 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0xaea2, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

[ 1098.069365][T24402] binder_alloc: binder_alloc_mmap_handler: 24367 20001000-20004000 already mapped failed -16
18:34:18 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x900000000000000})

18:34:18 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00@\x00'}})

[ 1098.126976][T24382] binder: BINDER_SET_CONTEXT_MGR already set
[ 1098.162943][T24382] binder: 24367:24382 ioctl 40046207 0 returned -16
18:34:18 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x0, 0x5, 0x0})

18:34:18 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x2000000000000009)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000003f000000000000050000a90000000000fa0000000000400003000003000000000000002560b700fff0ffff04b0bf00000000000a00000006bf17a1910e08586daab524f9a104e8b4127bdacbe782cc956a3a8228f0"])

[ 1098.392337][T24574] binder_alloc: binder_alloc_mmap_handler: 24558 20001000-20004000 already mapped failed -16
18:34:18 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00\x00\x00@\x00'}})

18:34:18 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0xaea3, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

[ 1098.435428][T24564] binder: BINDER_SET_CONTEXT_MGR already set
[ 1098.488224][T24564] binder: 24558:24564 ioctl 40046207 0 returned -16
18:34:18 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xa00000000000000})

[ 1098.588475][T24679] binder_alloc: 24558: binder_alloc_buf, no vma
[ 1098.599878][T15722] binder_release_work: 11 callbacks suppressed
[ 1098.599885][T15722] binder: undelivered TRANSACTION_ERROR: 29201
[ 1098.631525][T15722] binder: undelivered TRANSACTION_ERROR: 29189
18:34:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x50, r3, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])

18:34:19 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\x00\x00\x00@\x00'}})

18:34:19 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x0, 0x6, 0x0})

18:34:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0xaead, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

18:34:19 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000000a)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1098.880830][T24816] binder_transaction: 11 callbacks suppressed
[ 1098.880874][T24816] binder: 24790:24816 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
18:34:19 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\x00\x00\x00@\x00'}})

18:34:19 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xb00000000000000})

[ 1098.960050][T24886] binder_alloc: binder_alloc_mmap_handler: 24790 20001000-20004000 already mapped failed -16
[ 1099.005492][T24816] binder: BINDER_SET_CONTEXT_MGR already set
[ 1099.051053][T24816] binder: 24790:24816 ioctl 40046207 0 returned -16
[ 1099.074720][T24920] binder_alloc: 24790: binder_alloc_buf, no vma
[ 1099.081740][T24920] binder: 24790:24920 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
18:34:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000000))
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[])

18:34:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0xaeb7, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

[ 1099.103956][T15722] binder: undelivered TRANSACTION_ERROR: 29201
[ 1099.117196][T15722] binder: undelivered TRANSACTION_ERROR: 29189
18:34:19 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x0, 0x7, 0x0})

18:34:19 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x8d\xff\xff\xff\x00\x00\x00@\x00'}})

[ 1099.294463][T25003] binder: 25002:25003 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
[ 1099.361292][T25047] binder_alloc: binder_alloc_mmap_handler: 25002 20001000-20004000 already mapped failed -16
18:34:19 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00@\x00'}})

18:34:19 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000000b)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0x40049409, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

18:34:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x602380, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES64=r1, @ANYRES32=r0, @ANYRESOCT=r0, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESDEC=r0]])

[ 1099.466788][T25109] binder_alloc: 25002: binder_alloc_buf, no vma
[ 1099.472285][T25003] binder: BINDER_SET_CONTEXT_MGR already set
[ 1099.479690][T25109] binder: 25002:25109 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
[ 1099.492121][T25003] binder: 25002:25003 ioctl 40046207 0 returned -16
18:34:19 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xc00000000000000})

[ 1099.565799][    T5] binder: undelivered TRANSACTION_ERROR: 29201
[ 1099.575138][    T5] binder: undelivered TRANSACTION_ERROR: 29189
18:34:20 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x0, 0x12, 0x0})

18:34:20 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00@\x00'}})

18:34:20 executing program 0:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10000, 0x0)
getpeername$netlink(r0, &(0x7f0000000040), &(0x7f00000000c0)=0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])

[ 1099.703436][T25168] binder: 25158:25168 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
[ 1099.766244][T25211] binder_alloc: binder_alloc_mmap_handler: 25158 20001000-20004000 already mapped failed -16
18:34:20 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0x4004ae86, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

[ 1099.830182][T25210] binder_alloc: 25158: binder_alloc_buf, no vma
[ 1099.859529][T25168] binder: BINDER_SET_CONTEXT_MGR already set
[ 1099.864163][T25210] binder: 25158:25210 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
18:34:20 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00@\x00'}})

[ 1099.883799][T25168] binder: 25158:25168 ioctl 40046207 0 returned -16
18:34:20 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000000c)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:20 executing program 0:
r0 = accept4$x25(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000180)={<r1=>0x0}, &(0x7f00000001c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000200)={0x0, r1})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a000000068123d18b198430d238e730c25b2ef3aa053fb76c5ad1b733f05801b07ceeb9769f347aac03c10f593d3fe2d5ca6d4e4e3f3f69ecae85d452b1aac29c94de25b91de4f31310588f9741ac65e319bb6ee09f0ddd0c712fde588c6ec368196a59ef19241d8f12"])
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000240)={0xc00000000000, 0x2})

18:34:20 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xd00000000000000})

[ 1100.006102][ T3037] binder: undelivered TRANSACTION_ERROR: 29189
[ 1100.019254][ T3037] binder: undelivered TRANSACTION_ERROR: 29201
18:34:20 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x0, 0x48, 0x0})

18:34:20 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\xc0\x00\x00\x00\x00\x00@\x00'}})

[ 1100.178030][T25366] binder: 25362:25366 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
18:34:20 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0x4004ae8b, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

18:34:20 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0xfb27, 0x100000001, 0x4, 0xdc6a, 0x200, 0x9f9, 0xfffffffffffff2bb, 0x1, 0xfffffffffffffff9, 0xffffffff, 0x4, 0xfffffffffffffffa, 0x3}, {0x5, 0x3, 0xff, 0x8caa, 0x101, 0x6, 0x8, 0x3, 0x3ff, 0xc0, 0x7, 0x7fffffff, 0x31}, {0x3, 0xffff, 0x3, 0x3, 0xfff, 0x2, 0x5, 0x9, 0x40, 0x1813, 0xb7d, 0x0, 0xa7}], 0x73})
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])

[ 1100.244273][T25407] binder_alloc: binder_alloc_mmap_handler: 25362 20001000-20004000 already mapped failed -16
18:34:20 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00@\x00'}})

[ 1100.332900][T25407] binder_alloc: 25362: binder_alloc_buf, no vma
[ 1100.361624][T25457] binder: BINDER_SET_CONTEXT_MGR already set
[ 1100.404431][T25407] binder: 25362:25407 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
[ 1100.457442][T25457] binder: 25362:25457 ioctl 40046207 0 returned -16
[ 1100.457460][ T7825] binder: undelivered TRANSACTION_ERROR: 29201
[ 1100.475532][ T3037] binder: undelivered TRANSACTION_ERROR: 29189
18:34:20 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000000d)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:20 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00@\x00'}})

18:34:20 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x0, 0x4c, 0x0})

18:34:20 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xe00000000000000})

18:34:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000427bd7000ffdbdf2501000020000000000c410000000c001473797a3000000000"], 0x28}}, 0x1)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000000c0)=""/122)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000e4fd6a3f0007000000050000a90008000000fa00008a4a0000000000002560000000000000000000000a00000006"])
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f00000002c0)={"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"})

18:34:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0x4004ae99, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

[ 1100.636377][T25598] binder: 25591:25598 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
[ 1100.750306][T25630] binder_alloc: binder_alloc_mmap_handler: 25591 20001000-20004000 already mapped failed -16
18:34:21 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00@\x00'}})

[ 1100.791435][T25598] binder: BINDER_SET_CONTEXT_MGR already set
[ 1100.841123][T25670] binder_alloc: 25591: binder_alloc_buf, no vma
[ 1100.864693][T25598] binder: 25591:25598 ioctl 40046207 0 returned -16
18:34:21 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000000e)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

18:34:21 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\x00\x00\x00\x00@\x00'}})

[ 1100.932327][T25670] binder: 25591:25670 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
18:34:21 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000000)={0x2200000000000000, 0x0, 0x3a, 0x2, 0xb})
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000040)="e54f950f6f76f91447cdf7c38902122dae383b62169e8b1eceb09609edfcc31be549e88a")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b70021edb251d9b9f902000000000a000000064d006f34cc01fa02e95042be06025b0d858ebb27f7f2d9dabded6bdc35a222c2a1393d2e7ba6d3d2f7d2c252e346479a1805873327fec62d613497dd9de5894159a61598326d36b6a9f61351ae38e7e186d398dca517a9fbb3e4"])
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000180))

18:34:21 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x0, 0x60, 0x0})

18:34:21 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0xf00000000000000})

18:34:21 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfe\x00\x00\x00@\x00'}})

[ 1101.140543][T25838] binder: BINDER_SET_CONTEXT_MGR already set
18:34:21 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])

[ 1101.196177][T25838] binder: 25830:25838 ioctl 40046207 0 returned -16
18:34:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

18:34:21 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x0, 0x68, 0x0})

18:34:21 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00@\x00'}})

18:34:21 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000000f)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x42, 0x0)
ioctl$TCGETA(r3, 0x5405, &(0x7f0000000040))
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0])

[ 1101.481097][T25959] binder: BINDER_SET_CONTEXT_MGR already set
18:34:21 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00@\x00'}})

18:34:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae93, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

[ 1101.522312][T25993] binder_alloc: 25957: binder_alloc_buf, no vma
[ 1101.549354][T25959] binder: 25957:25959 ioctl 40046207 0 returned -16
18:34:22 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x0, 0x6c, 0x0})

18:34:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f00000002c0)={"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"})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000015c00fa0000f0ffff04040000000000000a00000006000000000000000000000000"])

18:34:22 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x1000000000000000})

[ 1101.731307][T26140] binder_alloc: 26087: binder_alloc_buf, no vma
[ 1101.732328][T26119] binder: BINDER_SET_CONTEXT_MGR already set
[ 1101.771026][T26119] binder: 26087:26119 ioctl 40046207 0 returned -16
18:34:22 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00'}})

18:34:22 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x0, 0x74, 0x0})

18:34:22 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x2000000000000010)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

18:34:22 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae9c, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

18:34:22 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00@\x00'}})

[ 1102.079446][T26243] binder: BINDER_SET_CONTEXT_MGR already set
[ 1102.121136][T26256] binder_alloc: 26242: binder_alloc_buf, no vma
[ 1102.168616][T26243] binder: 26242:26243 ioctl 40046207 0 returned -16
18:34:22 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00@\x00'}})

18:34:22 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x0, 0x7a, 0x0})

18:34:22 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x1200000000000000})

18:34:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000007c7e93b2f9e1aceeff460dc94459b000000050000a90000000000fa033b000000000040cb850f1901000000000000002560b700fff0ff"])

18:34:22 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0x4020940d, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

18:34:22 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x2000000000000011)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1102.419958][T26425] binder_alloc_mmap_handler: 4 callbacks suppressed
[ 1102.419988][T26425] binder_alloc: binder_alloc_mmap_handler: 26405 20001000-20004000 already mapped failed -16
[ 1102.440958][T26421] binder: BINDER_SET_CONTEXT_MGR already set
[ 1102.448585][T26421] binder: 26405:26421 ioctl 40046207 0 returned -16
18:34:22 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00\x00@\x00'}})

[ 1102.477606][T26425] binder_alloc: 26405: binder_alloc_buf, no vma
18:34:22 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x0, 0x300, 0x0})

18:34:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80101, 0x0)
ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000040))
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])

18:34:23 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0x4040ae9e, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

18:34:23 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\x00\x00@\x00'}})

[ 1102.690438][T26533] binder_alloc: binder_alloc_mmap_handler: 26514 20001000-20004000 already mapped failed -16
[ 1102.749558][T26515] binder: BINDER_SET_CONTEXT_MGR already set
18:34:23 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x2000000000000012)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1102.802805][T26515] binder: 26514:26515 ioctl 40046207 0 returned -16
18:34:23 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x1800000000000000})

18:34:23 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x0, 0x500, 0x0})

18:34:23 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0x4040aea0, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

18:34:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x24c, r2, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}]}, @TIPC_NLA_BEARER={0x98, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x80000001, @mcast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffffffffffff}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x66e77806}]}, @TIPC_NLA_LINK={0xc8, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5fa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ac}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffff81}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd5d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x800}, 0x4000081)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000007000002000000a90000000000fa0000000000400003000001000000000000002560b700fff4ffff04040000000000000a000000061fb9538f059c455266bc95337b098528c19f6deb64203511c21145eb7cfddea1735ba9bce5adce4bd7bd80580e18829d3e5794df1a3a1f9ea52c0e"])

18:34:23 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\x00\x00@\x00'}})

[ 1103.070581][T26684] binder_alloc: binder_alloc_mmap_handler: 26666 20001000-20004000 already mapped failed -16
[ 1103.113429][T26669] binder: BINDER_SET_CONTEXT_MGR already set
[ 1103.137357][T26669] binder: 26666:26669 ioctl 40046207 0 returned -16
18:34:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x400000, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000a9eecd990007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a006c7306"])

18:34:23 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x8d\xff\xff\xff\x00\x00@\x00'}})

18:34:23 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x0, 0x600, 0x0})

18:34:23 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0x4048ae9b, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

18:34:23 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x2000000000000000})

[ 1103.341797][T26886] binder_alloc: binder_alloc_mmap_handler: 26878 20001000-20004000 already mapped failed -16
18:34:23 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x2000000000000013)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1103.447072][T26879] binder: BINDER_SET_CONTEXT_MGR already set
18:34:23 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00@\x00'}})

18:34:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
fallocate(r0, 0x1, 0x7fff, 0x4)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])

[ 1103.499552][T26879] binder: 26878:26879 ioctl 40046207 0 returned -16
18:34:24 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x0, 0x700, 0x0})

18:34:24 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000000010040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006ed"])
ioctl$KVM_SET_MSRS(r2, 0x4068aea3, &(0x7f0000000040)={0x1, 0x0, [{0x38f}]})

18:34:24 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00@\x00'}})

18:34:24 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x2000000000000014)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1103.801608][T27112] binder_alloc: binder_alloc_mmap_handler: 27091 20001000-20004000 already mapped failed -16
18:34:24 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000007000000050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"])

[ 1103.846518][T27111] binder_alloc_new_buf_locked: 2 callbacks suppressed
[ 1103.846529][T27111] binder_alloc: 27091: binder_alloc_buf, no vma
18:34:24 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x3e0e000000000000})

[ 1103.913282][T27101] kasan: CONFIG_KASAN_INLINE enabled
[ 1103.919054][T27101] kasan: GPF could be caused by NULL-ptr deref or user memory access
[ 1103.931319][T27094] binder: BINDER_SET_CONTEXT_MGR already set
[ 1103.937882][T27111] binder_transaction: 16 callbacks suppressed
[ 1103.937902][T27111] binder: 27091:27111 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
18:34:24 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x2000000000000015)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1104.007179][T27094] binder: 27091:27094 ioctl 40046207 0 returned -16
[ 1104.007188][T15722] binder_release_work: 17 callbacks suppressed
[ 1104.007203][T15722] binder: undelivered TRANSACTION_ERROR: 29201
[ 1104.059421][T27101] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[ 1104.066438][T27101] CPU: 1 PID: 27101 Comm: syz-executor.1 Not tainted 5.0.0-rc8-next-20190301 #1
[ 1104.075458][T27101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1104.086074][T27101] RIP: 0010:__dentry_path+0x49e/0x7c0
[ 1104.091447][T27101] Code: 89 fc 41 83 e4 01 44 89 e6 e8 3e c8 b1 ff 45 84 e4 0f 85 04 02 00 00 e8 f0 c6 b1 ff 48 8b 85 18 ff ff ff 44 89 bd 40 ff ff ff <80> 38 00 0f 85 f9 02 00 00 48 8b 85 38 ff ff ff 41 83 e7 01 44 89
[ 1104.111052][T27101] RSP: 0018:ffff888059647ad8 EFLAGS: 00010216
[ 1104.117117][T27101] RAX: dffffc0000000005 RBX: 0000000000000000 RCX: ffffc90008000000
[ 1104.125080][T27101] RDX: 000000000000386d RSI: ffffffff81befb10 RDI: 0000000000000001
[ 1104.133044][T27101] RBP: ffff888059647bc8 R08: ffff8880884d8180 R09: 0000000000000000
[ 1104.141017][T27101] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1104.148977][T27101] R13: ffff888059647ba0 R14: ffff888095a79e7e R15: 0000000000015e90
[ 1104.156952][T27101] FS:  00007f48ed0ee700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[ 1104.165878][T27101] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1104.172452][T27101] CR2: 00007f37f866bdb8 CR3: 0000000058eda000 CR4: 00000000001426e0
[ 1104.180419][T27101] Call Trace:
[ 1104.183719][T27101]  ? simple_dname+0x1f0/0x1f0
[ 1104.188394][T27101]  ? kmem_cache_alloc_trace+0x354/0x760
[ 1104.193947][T27101]  dentry_path_raw+0x26/0x30
[ 1104.198537][T27101]  kvm_uevent_notify_change.part.0+0x213/0x440
[ 1104.204694][T27101]  kvm_dev_ioctl+0x105b/0x15e0
[ 1104.209460][T27101]  ? kvm_debugfs_release+0x90/0x90
[ 1104.214581][T27101]  ? __fget+0x35a/0x550
[ 1104.218739][T27101]  ? kvm_debugfs_release+0x90/0x90
[ 1104.223855][T27101]  do_vfs_ioctl+0xd6e/0x1390
[ 1104.228459][T27101]  ? ioctl_preallocate+0x210/0x210
[ 1104.233603][T27101]  ? __fget+0x381/0x550
[ 1104.237759][T27101]  ? ksys_dup3+0x3e0/0x3e0
[ 1104.242255][T27101]  ? nsecs_to_jiffies+0x30/0x30
[ 1104.247110][T27101]  ? tomoyo_file_ioctl+0x23/0x30
[ 1104.252043][T27101]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1104.258275][T27101]  ? security_file_ioctl+0x93/0xc0
[ 1104.263379][T27101]  ksys_ioctl+0xab/0xd0
[ 1104.267553][T27101]  __x64_sys_ioctl+0x73/0xb0
[ 1104.272141][T27101]  do_syscall_64+0x103/0x610
[ 1104.276727][T27101]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1104.282608][T27101] RIP: 0033:0x457e29
[ 1104.286497][T27101] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1104.306095][T27101] RSP: 002b:00007f48ed0edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1104.314500][T27101] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29
[ 1104.322470][T27101] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007
[ 1104.330450][T27101] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1104.338418][T27101] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f48ed0ee6d4
[ 1104.346384][T27101] R13: 00000000004c093a R14: 00000000004d2750 R15: 00000000ffffffff
[ 1104.354360][T27101] Modules linked in:
18:34:24 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00@\x00'}})

[ 1104.358678][    T5] binder: undelivered TRANSACTION_ERROR: 29189
[ 1104.380099][ T3876] kobject: 'loop3' (00000000239d4d74): kobject_uevent_env
[ 1104.398923][ T3876] kobject: 'loop3' (00000000239d4d74): fill_kobj_path: path = '/devices/virtual/block/loop3'
18:34:24 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000708a9ddce4140f0cbec8fa73"], 0x0, 0x1200, 0x0})

[ 1104.414928][T27101] ---[ end trace 9eee6337f1d9d37b ]---
[ 1104.420657][T27101] RIP: 0010:__dentry_path+0x49e/0x7c0
[ 1104.427914][T27101] Code: 89 fc 41 83 e4 01 44 89 e6 e8 3e c8 b1 ff 45 84 e4 0f 85 04 02 00 00 e8 f0 c6 b1 ff 48 8b 85 18 ff ff ff 44 89 bd 40 ff ff ff <80> 38 00 0f 85 f9 02 00 00 48 8b 85 38 ff ff ff 41 83 e7 01 44 89
[ 1104.450408][T27138] kobject: 'kvm' (000000007432dc29): kobject_uevent_env
[ 1104.459594][T27101] RSP: 0018:ffff888059647ad8 EFLAGS: 00010216
[ 1104.467384][ T3876] kobject: 'loop5' (000000005a7b0f7f): kobject_uevent_env
[ 1104.475218][T27285] binder: 27283:27285 transaction failed 29201/-22, size -2549729600380862440-8357212777111033060 line 3147
[ 1104.492115][T27138] kobject: 'kvm' (000000007432dc29): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[ 1104.500812][T27101] RAX: dffffc0000000005 RBX: 0000000000000000 RCX: ffffc90008000000
18:34:24 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x2000000000000016)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

[ 1104.510262][T27101] RDX: 000000000000386d RSI: ffffffff81befb10 RDI: 0000000000000001
[ 1104.513343][ T3876] kobject: 'loop5' (000000005a7b0f7f): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1104.531683][T27101] RBP: ffff888059647bc8 R08: ffff8880884d8180 R09: 0000000000000000
18:34:24 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000000000000070000f9d72ed8f32300050000a90000000000fa000000000040000300000100000000000000000000000a00000006"])

[ 1104.562168][T27101] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1104.564696][T27358] binder_alloc: binder_alloc_mmap_handler: 27283 20001000-20004000 already mapped failed -16
[ 1104.570210][T27101] R13: ffff888059647ba0 R14: ffff888095a79e7e R15: 0000000000015e90
[ 1104.570223][T27101] FS:  00007f48ed0ee700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[ 1104.570233][T27101] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1104.570248][T27101] CR2: 0000000000000000 CR3: 0000000058eda000 CR4: 00000000001426e0
18:34:24 executing program 2:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0xfe3e)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0xd028, 0x16d0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x101})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x3f00000000000000})

18:34:25 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffffffffff09b}, 0x1c)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\x00\x00\x00\x00@\x00'}})

[ 1104.595371][ T3876] kobject: 'loop4' (000000000a426103): kobject_uevent_env
[ 1104.607369][T27285] binder: BINDER_SET_CONTEXT_MGR already set
[ 1104.617034][ T3876] kobject: 'loop4' (000000000a426103): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1104.629066][T27364] kobject: 'kvm' (000000007432dc29): kobject_uevent_env
[ 1104.652559][ T3876] kobject: 'loop0' (000000005b275ac8): kobject_uevent_env
[ 1104.659828][T27371] binder_alloc: 27283: binder_alloc_buf, no vma
[ 1104.668570][T27285] binder: 27283:27285 ioctl 40046207 0 returned -16
[ 1104.671802][T27371] binder: 27283:27371 transaction failed 29189/-3, size -2549729600380862440-8357212777111033060 line 3147
[ 1104.682436][T27364] kobject: 'kvm' (000000007432dc29): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[ 1104.695320][ T3876] kobject: 'loop0' (000000005b275ac8): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 1104.699792][T27101] Kernel panic - not syncing: Fatal exception
[ 1104.713674][T27101] Kernel Offset: disabled
[ 1104.717999][T27101] Rebooting in 86400 seconds..