syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:42 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000680))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  517.753503] binder: 4177:4177 ioctl 40046207 0 returned -16
[  517.830716] binder: BINDER_SET_CONTEXT_MGR already set
[  517.830724] binder: 4186:4186 ioctl 40046207 0 returned -16
17:47:42 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, 0x0)

[  517.830805] binder_alloc: 25308: binder_alloc_buf, no vma
[  517.830824] binder: 4186:4186 transaction failed 29189/-3, size 0-0 line 3284
17:47:42 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
socket$inet6(0x10, 0x3, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r8 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  517.841865] binder_alloc: 26589: binder_alloc_buf, no vma
17:47:42 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e", 0x4c, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  517.841888] binder: 4181:4182 transaction failed 29189/-3, size 0-0 line 3284
[  517.842271] binder: undelivered TRANSACTION_ERROR: 29189
17:47:42 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x0, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  517.864946] binder: BINDER_SET_CONTEXT_MGR already set
17:47:42 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000680))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

17:47:42 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, 0x0)

[  517.864954] binder: 4188:4190 ioctl 40046207 0 returned -16
17:47:42 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:42 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
socket$inet6(0x10, 0x3, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r8 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  517.865065] binder_alloc: 24844: binder_alloc_buf, no vma
[  517.865086] binder: 4188:4190 transaction failed 29189/-3, size 0-0 line 3284
[  517.865468] binder: undelivered TRANSACTION_ERROR: 29189
[  518.073676] binder: 4212:4212 transaction failed 29189/-22, size 0-0 line 3138
[  518.080042] binder: BINDER_SET_CONTEXT_MGR already set
[  518.080050] binder: 4224:4224 ioctl 40046207 0 returned -16
17:47:42 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, 0x0)

[  518.080123] binder_alloc: 24844: binder_alloc_buf, no vma
[  518.080140] binder: 4224:4224 transaction failed 29189/-3, size 0-0 line 3284
[  518.080524] binder: undelivered TRANSACTION_ERROR: 29189
17:47:42 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000680))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

17:47:42 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  518.105836] binder: undelivered TRANSACTION_ERROR: 29189
[  518.118542] binder_alloc: 26589: binder_alloc_buf, no vma
17:47:42 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x0, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  518.118566] binder: 4217:4223 transaction failed 29189/-3, size 0-0 line 3284
[  518.118970] binder: undelivered TRANSACTION_ERROR: 29189
[  518.126567] binder: 4191:4196 transaction failed 29189/-22, size 0-0 line 3138
[  518.137553] binder: undelivered TRANSACTION_ERROR: 29189
[  518.262195] binder: BINDER_SET_CONTEXT_MGR already set
[  518.262202] binder: 4240:4240 ioctl 40046207 0 returned -16
17:47:42 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:42 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d", 0x72, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:42 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, 0x0)

[  518.262928] binder_alloc: 24844: binder_alloc_buf, no vma
[  518.262946] binder: 4240:4240 transaction failed 29189/-3, size 0-0 line 3284
[  518.263587] binder: undelivered TRANSACTION_ERROR: 29189
[  518.414787] binder_alloc: 26589: binder_alloc_buf, no vma
[  518.414811] binder: 4249:4253 transaction failed 29189/-3, size 0-0 line 3284
[  518.415438] binder: undelivered TRANSACTION_ERROR: 29189
[  518.434119] binder: 4256:4256 transaction failed 29189/-22, size 0-0 line 3138
17:47:42 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x0, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r8 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0)

17:47:42 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000680))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  518.456073] binder: undelivered TRANSACTION_ERROR: 29189
[  518.471463] binder: BINDER_SET_CONTEXT_MGR already set
17:47:42 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x0, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:42 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x0)
ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0)

[  518.471470] binder: 4268:4268 ioctl 40046207 0 returned -16
[  518.471546] binder_alloc: 24844: binder_alloc_buf, no vma
[  518.471563] binder: 4268:4268 transaction failed 29189/-3, size 0-0 line 3284
[  518.471871] binder: undelivered TRANSACTION_ERROR: 29189
17:47:43 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  518.503365] binder: 4243:4245 transaction failed 29189/-22, size 0-0 line 3138
17:47:43 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x0, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r8 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0)

17:47:43 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000680))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

17:47:43 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d", 0x72, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  518.519000] binder: BINDER_SET_CONTEXT_MGR already set
[  518.519050] binder: 4241:4248 ioctl 40046207 0 returned -16
[  518.523931] binder_alloc: 25308: binder_alloc_buf, no vma
[  518.532990] binder: undelivered TRANSACTION_ERROR: 29189
[  518.541304] binder: 4241:4248 transaction failed 29189/-3, size 0-0 line 3284
17:47:43 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x0)
ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0)

[  518.580699] binder: undelivered TRANSACTION_ERROR: 29189
[  518.620175] binder_alloc: 26589: binder_alloc_buf, no vma
[  518.620195] binder: 4272:4275 transaction failed 29189/-3, size 0-0 line 3284
17:47:43 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x0, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  518.620466] binder: undelivered TRANSACTION_ERROR: 29189
[  518.726084] binder: BINDER_SET_CONTEXT_MGR already set
[  518.726091] binder: 4279:4282 ioctl 40046207 0 returned -16
17:47:43 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x0)
ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0)

17:47:43 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:43 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000680))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  518.726199] binder_alloc: 24844: binder_alloc_buf, no vma
[  518.726222] binder: 4279:4282 transaction failed 29189/-3, size 0-0 line 3284
17:47:43 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x0, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  518.726734] binder: undelivered TRANSACTION_ERROR: 29189
[  518.740010] binder: 4274:4283 transaction failed 29189/-22, size 0-0 line 3138
[  518.850873] binder_alloc: 26589: binder_alloc_buf, no vma
[  518.850893] binder: 4296:4298 transaction failed 29189/-3, size 0-0 line 3284
[  518.851079] binder: undelivered TRANSACTION_ERROR: 29189
17:47:43 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d", 0x72, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:43 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  518.858658] binder: 4284:4287 transaction failed 29189/-22, size 0-0 line 3138
[  518.897423] binder: undelivered TRANSACTION_ERROR: 29189
[  518.898092] binder: BINDER_SET_CONTEXT_MGR already set
[  518.898176] binder: 4289:4291 ioctl 40046207 0 returned -16
17:47:43 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000680))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

17:47:43 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x0, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:43 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x0, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

17:47:43 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, 0x0}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  518.900366] binder_alloc: 25308: binder_alloc_buf, no vma
[  518.900479] binder: 4289:4291 transaction failed 29189/-3, size 0-0 line 3284
[  518.936563] binder: undelivered TRANSACTION_ERROR: 29189
[  519.011296] binder: undelivered TRANSACTION_ERROR: 29189
[  519.020147] binder: BINDER_SET_CONTEXT_MGR already set
[  519.020156] binder: 4304:4307 ioctl 40046207 0 returned -16
[  519.020280] binder_alloc: 24844: binder_alloc_buf, no vma
[  519.020305] binder: 4304:4307 transaction failed 29189/-3, size 0-0 line 3284
17:47:43 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:43 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000680))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

17:47:43 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9c", 0x85, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  519.021091] binder: undelivered TRANSACTION_ERROR: 29189
[  519.081476] binder_alloc: 26589: binder_alloc_buf, no vma
17:47:43 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x0, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  519.081497] binder: 4316:4318 transaction failed 29189/-3, size 0-0 line 3284
17:47:44 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x0, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  519.081826] binder: undelivered TRANSACTION_ERROR: 29189
[  519.248276] binder: BINDER_SET_CONTEXT_MGR already set
[  519.248284] binder: 4337:4337 ioctl 40046207 0 returned -16
[  519.248360] binder_alloc: 24844: binder_alloc_buf, no vma
[  519.248379] binder: 4337:4337 transaction failed 29189/-3, size 0-0 line 3284
17:47:44 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, 0x0}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  519.248691] binder: undelivered TRANSACTION_ERROR: 29189
[  519.285943] binder: 4336:4336 transaction failed 29189/-22, size 0-0 line 3138
17:47:44 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000680))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  519.301837] binder: 4319:4343 transaction failed 29189/-22, size 0-0 line 3138
17:47:44 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x0, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0)

17:47:44 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  519.304314] binder: BINDER_SET_CONTEXT_MGR already set
[  519.304358] binder: 4325:4326 ioctl 40046207 0 returned -16
[  519.311475] binder_alloc: 26589: binder_alloc_buf, no vma
[  519.311498] binder: 4334:4340 transaction failed 29189/-3, size 0-0 line 3284
[  519.311886] binder_alloc: 25308: binder_alloc_buf, no vma
17:47:44 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x0, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:44 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9c", 0x85, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  519.312124] binder: 4325:4326 transaction failed 29189/-3, size 0-0 line 3284
17:47:44 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000680))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

17:47:44 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, 0x0}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  519.312462] binder: undelivered TRANSACTION_ERROR: 29189
[  519.326933] binder: undelivered TRANSACTION_ERROR: 29189
[  519.342015] binder: undelivered TRANSACTION_ERROR: 29189
[  519.342363] binder: undelivered TRANSACTION_ERROR: 29189
[  519.490309] binder_alloc: 26589: binder_alloc_buf, no vma
[  519.490334] binder: 4353:4354 transaction failed 29189/-3, size 0-0 line 3284
17:47:44 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, 0x0}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:44 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x0, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0)

17:47:44 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x0, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  519.490566] binder: undelivered TRANSACTION_ERROR: 29189
17:47:44 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  519.491662] binder: BINDER_SET_CONTEXT_MGR already set
[  519.491669] binder: 4359:4359 ioctl 40046207 0 returned -16
17:47:44 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000680))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  519.491752] binder_alloc: 24844: binder_alloc_buf, no vma
[  519.491769] binder: 4359:4359 transaction failed 29189/-3, size 0-0 line 3284
17:47:44 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9c", 0x85, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  519.492237] binder: undelivered TRANSACTION_ERROR: 29189
[  519.550403] binder: 4365:4365 transaction failed 29189/-22, size 0-0 line 3138
[  519.684944] binder: BINDER_SET_CONTEXT_MGR already set
17:47:44 executing program 0:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000680))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  519.685007] binder: 4358:4361 ioctl 40046207 0 returned -16
[  519.686685] binder_alloc: 25308: binder_alloc_buf, no vma
[  519.686926] binder: 4358:4361 transaction failed 29189/-3, size 0-0 line 3284
17:47:44 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, 0x0)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:44 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  519.703595] binder: 4362:4368 transaction failed 29189/-22, size 0-0 line 3138
[  519.720299] binder: BINDER_SET_CONTEXT_MGR already set
17:47:45 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000680))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

17:47:45 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x0, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0)

[  519.720306] binder: 4382:4382 ioctl 40046207 0 returned -16
17:47:45 executing program 0:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e", 0x4c, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  519.720386] binder_alloc: 24844: binder_alloc_buf, no vma
[  519.720404] binder: 4382:4382 transaction failed 29189/-3, size 0-0 line 3284
17:47:45 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba", 0x8e, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  519.720899] binder: undelivered TRANSACTION_ERROR: 29189
[  519.725822] binder: undelivered TRANSACTION_ERROR: 29189
[  519.748393] binder: undelivered TRANSACTION_ERROR: 29189
[  519.752074] binder_alloc: 26589: binder_alloc_buf, no vma
17:47:45 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, 0x0)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:45 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  519.752097] binder: 4378:4379 transaction failed 29189/-3, size 0-0 line 3284
[  519.752430] binder: undelivered TRANSACTION_ERROR: 29189
17:47:45 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000680))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  519.935325] binder: 4385:4407 transaction failed 29189/-22, size 0-0 line 3138
[  519.982694] binder_alloc: 26589: binder_alloc_buf, no vma
[  519.982714] binder: 4404:4405 transaction failed 29189/-3, size 0-0 line 3284
[  519.983038] binder: undelivered TRANSACTION_ERROR: 29189
17:47:45 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x0, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r8 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0)

17:47:45 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba", 0x8e, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:45 executing program 0:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e", 0x4c, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  519.985677] binder: undelivered TRANSACTION_ERROR: 29189
[  520.047022] binder: 4401:4411 transaction failed 29189/-22, size 0-0 line 3138
17:47:45 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, 0x0)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  520.104505] binder: undelivered TRANSACTION_ERROR: 29189
[  520.118737] binder: BINDER_SET_CONTEXT_MGR already set
17:47:45 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:45 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  520.118788] binder: 4397:4402 ioctl 40046207 0 returned -16
[  520.120159] binder_alloc: 25308: binder_alloc_buf, no vma
[  520.120425] binder: 4397:4402 transaction failed 29189/-3, size 0-0 line 3284
[  520.165909] binder: undelivered TRANSACTION_ERROR: 29189
[  520.209590] binder_alloc: 26589: binder_alloc_buf, no vma
[  520.209611] binder: 4423:4432 transaction failed 29189/-3, size 0-0 line 3284
17:47:45 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x0, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r8 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0)

[  520.220626] binder: undelivered TRANSACTION_ERROR: 29189
17:47:45 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r5, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  520.319616] binder: 4442:4442 transaction failed 29189/-22, size 0-0 line 3138
17:47:45 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9c", 0x85, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:45 executing program 0:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba", 0x8e, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  520.356334] binder: undelivered TRANSACTION_ERROR: 29189
[  520.389651] binder: 4435:4441 transaction failed 29189/-22, size 0-0 line 3138
[  520.405669] binder: BINDER_SET_CONTEXT_MGR already set
17:47:46 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:46 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  520.405678] binder: 4443:4451 ioctl 40046207 0 returned -16
[  520.405780] binder_alloc: 25308: binder_alloc_buf, no vma
[  520.405806] binder: 4443:4451 transaction failed 29189/-3, size 0-0 line 3284
[  520.435946] binder: undelivered TRANSACTION_ERROR: 29189
17:47:46 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
socket$inet6(0x10, 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r7 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)

17:47:46 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r5, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  520.455884] binder: undelivered TRANSACTION_ERROR: 29189
[  520.472544] binder_alloc: 26589: binder_alloc_buf, no vma
[  520.472563] binder: 4449:4460 transaction failed 29189/-3, size 0-0 line 3284
[  520.489328] binder: undelivered TRANSACTION_ERROR: 29189
[  520.530578] binder: BINDER_SET_CONTEXT_MGR already set
17:47:46 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9c", 0x85, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:46 executing program 0:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9c", 0x85, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  520.530585] binder: 4465:4465 ioctl 40046207 0 returned -16
[  520.531471] binder_alloc: 24844: binder_alloc_buf, no vma
[  520.531489] binder: 4465:4465 transaction failed 29189/-3, size 0-0 line 3284
17:47:46 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

17:47:46 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  520.531983] binder: undelivered TRANSACTION_ERROR: 29189
[  520.624598] binder: 4469:4469 transaction failed 29189/-22, size 0-0 line 3138
[  520.661590] binder: BINDER_SET_CONTEXT_MGR already set
[  520.661601] binder: 4473:4473 ioctl 40046207 0 returned -16
[  520.661777] binder_alloc: 25308: binder_alloc_buf, no vma
17:47:46 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
socket$inet6(0x10, 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r7 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)

[  520.661798] binder: 4473:4473 transaction failed 29189/-3, size 0-0 line 3284
17:47:46 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

17:47:46 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r5, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  520.673642] binder_alloc: 26589: binder_alloc_buf, no vma
17:47:46 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9c", 0x85, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  520.673661] binder: 4475:4478 transaction failed 29189/-3, size 0-0 line 3284
[  520.673841] binder: undelivered TRANSACTION_ERROR: 29189
[  520.704039] binder: BINDER_SET_CONTEXT_MGR already set
17:47:46 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  520.704046] binder: 4486:4486 ioctl 40046207 0 returned -16
[  520.704121] binder_alloc: 24844: binder_alloc_buf, no vma
17:47:46 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:46 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r7 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)

[  520.704139] binder: 4486:4486 transaction failed 29189/-3, size 0-0 line 3284
[  520.704441] binder: undelivered TRANSACTION_ERROR: 29189
[  520.773500] binder: 4479:4482 transaction failed 29189/-22, size 0-0 line 3138
[  520.807635] binder: undelivered TRANSACTION_ERROR: 29189
17:47:46 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  520.879194] binder_alloc: 26589: binder_alloc_buf, no vma
[  520.879213] binder: 4495:4496 transaction failed 29189/-3, size 0-0 line 3284
17:47:46 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, 0x0, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  520.879505] binder: undelivered TRANSACTION_ERROR: 29189
[  520.938233] binder: BINDER_SET_CONTEXT_MGR already set
[  520.938242] binder: 4507:4507 ioctl 40046207 0 returned -16
[  520.938334] binder_alloc: 24844: binder_alloc_buf, no vma
17:47:47 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

17:47:47 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  520.938352] binder: 4507:4507 transaction failed 29189/-3, size 0-0 line 3284
17:47:47 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207", 0x8a, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:47 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, 0x0, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  520.938872] binder: undelivered TRANSACTION_ERROR: 29189
[  520.948548] binder: 4505:4505 transaction failed 29189/-22, size 0-0 line 3138
17:47:47 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r7 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)

17:47:47 executing program 0:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9c", 0x85, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  520.981632] binder: BINDER_SET_CONTEXT_MGR already set
[  520.981685] binder: 4494:4497 ioctl 40046207 0 returned -16
[  520.983084] binder_alloc: 25308: binder_alloc_buf, no vma
[  520.983288] binder: 4494:4497 transaction failed 29189/-3, size 0-0 line 3284
[  520.986513] binder: undelivered TRANSACTION_ERROR: 29189
17:47:47 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  521.021418] binder: undelivered TRANSACTION_ERROR: 29189
[  521.081023] binder_alloc: 26589: binder_alloc_buf, no vma
[  521.081044] binder: 4517:4519 transaction failed 29189/-3, size 0-0 line 3284
17:47:47 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:47 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, 0x0, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  521.081565] binder: undelivered TRANSACTION_ERROR: 29189
[  521.269617] binder: 4516:4520 transaction failed 29189/-22, size 0-0 line 3138
17:47:47 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

[  521.275297] binder: 4540:4540 transaction failed 29189/-22, size 0-0 line 3138
17:47:47 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

17:47:47 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207", 0x8a, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:47 executing program 0:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
[  521.282684] binder_alloc: 26589: binder_alloc_buf, no vma
[  521.282704] binder: 4533:4538 transaction failed 29189/-3, size 0-0 line 3284
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9c", 0x85, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  521.282875] binder: undelivered TRANSACTION_ERROR: 29189
[  521.316252] binder: undelivered TRANSACTION_ERROR: 29189
[  521.316272] binder: undelivered TRANSACTION_ERROR: 29189
[  521.320656] binder: BINDER_SET_CONTEXT_MGR already set
17:47:47 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c0001000000190015", 0x2b}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:47 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207", 0x8a, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:47 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  521.320663] binder: 4539:4539 ioctl 40046207 0 returned -16
[  521.320749] binder_alloc: 25308: binder_alloc_buf, no vma
[  521.320765] binder: 4539:4539 transaction failed 29189/-3, size 0-0 line 3284
[  521.337953] binder: BINDER_SET_CONTEXT_MGR already set
17:47:47 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

17:47:47 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:47 executing program 0:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9c", 0x85, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  521.337961] binder: 4550:4550 ioctl 40046207 0 returned -16
[  521.338037] binder_alloc: 24844: binder_alloc_buf, no vma
[  521.338055] binder: 4550:4550 transaction failed 29189/-3, size 0-0 line 3284
17:47:47 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  521.338495] binder: undelivered TRANSACTION_ERROR: 29189
[  521.516287] binder: BINDER_SET_CONTEXT_MGR already set
17:47:47 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e", 0x8c, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  521.516294] binder: 4566:4566 ioctl 40046207 0 returned -16
[  521.516367] binder_alloc: 24844: binder_alloc_buf, no vma
17:47:48 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)='U', 0x1}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  521.516384] binder: 4566:4566 transaction failed 29189/-3, size 0-0 line 3284
17:47:48 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  521.516894] binder: undelivered TRANSACTION_ERROR: 29189
[  521.594798] binder_alloc: 26589: binder_alloc_buf, no vma
17:47:48 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

17:47:48 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  521.594818] binder: 4571:4575 transaction failed 29189/-3, size 0-0 line 3284
17:47:48 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  521.595917] binder: undelivered TRANSACTION_ERROR: 29189
[  521.642874] binder: 4583:4583 transaction failed 29189/-22, size 0-0 line 3138
17:47:48 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e", 0x8c, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  521.662602] binder: BINDER_SET_CONTEXT_MGR already set
17:47:48 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)='U', 0x1}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  521.662614] binder: 4568:4573 ioctl 40046207 0 returned -16
[  521.666313] binder_alloc: 25308: binder_alloc_buf, no vma
17:47:48 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:48 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

[  521.666343] binder: 4568:4573 transaction failed 29189/-3, size 0-0 line 3284
[  521.695758] binder: undelivered TRANSACTION_ERROR: 29189
17:47:48 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  521.707523] binder: 4574:4581 transaction failed 29189/-22, size 0-0 line 3138
17:47:48 executing program 0:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e", 0x8c, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  521.716489] binder: BINDER_SET_CONTEXT_MGR already set
[  521.716497] binder: 4590:4590 ioctl 40046207 0 returned -16
[  521.717475] binder_alloc: 24844: binder_alloc_buf, no vma
[  521.717492] binder: 4590:4590 transaction failed 29189/-3, size 0-0 line 3284
17:47:48 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e", 0x8c, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  521.717865] binder: undelivered TRANSACTION_ERROR: 29189
17:47:48 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:48 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

17:47:49 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)='U', 0x1}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  521.766764] binder: undelivered TRANSACTION_ERROR: 29189
[  521.824351] binder_alloc: 26589: binder_alloc_buf, no vma
17:47:49 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  521.824373] binder: 4594:4597 transaction failed 29189/-3, size 0-0 line 3284
[  521.824710] binder: undelivered TRANSACTION_ERROR: 29189
[  521.918830] binder: BINDER_SET_CONTEXT_MGR already set
[  521.918837] binder: 4610:4610 ioctl 40046207 0 returned -16
17:47:49 executing program 0:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e", 0x8c, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:49 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

[  521.918915] binder_alloc: 24844: binder_alloc_buf, no vma
[  521.918934] binder: 4610:4610 transaction failed 29189/-3, size 0-0 line 3284
17:47:49 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  521.919472] binder: undelivered TRANSACTION_ERROR: 29189
17:47:49 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71", 0x8d, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:49 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

17:47:49 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a8", 0x16}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  521.921991] binder: 4607:4607 transaction failed 29189/-22, size 0-0 line 3138
[  521.958226] binder: undelivered TRANSACTION_ERROR: 29189
[  522.006654] binder: BINDER_SET_CONTEXT_MGR already set
[  522.006708] binder: 4606:4609 ioctl 40046207 0 returned -16
17:47:49 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

[  522.010478] binder_alloc: 25308: binder_alloc_buf, no vma
[  522.010852] binder: 4606:4609 transaction failed 29189/-3, size 0-0 line 3284
17:47:49 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  522.045871] binder: undelivered TRANSACTION_ERROR: 29189
[  522.063678] binder_alloc: 26589: binder_alloc_buf, no vma
17:47:49 executing program 0:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  522.063712] binder: 4619:4621 transaction failed 29189/-3, size 0-0 line 3284
[  522.064106] binder: undelivered TRANSACTION_ERROR: 29189
[  522.189059] binder: BINDER_SET_CONTEXT_MGR already set
17:47:49 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  522.189068] binder: 4628:4630 ioctl 40046207 0 returned -16
17:47:49 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71", 0x8d, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  522.189230] binder_alloc: 24844: binder_alloc_buf, no vma
[  522.189253] binder: 4628:4630 transaction failed 29189/-3, size 0-0 line 3284
17:47:49 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a8", 0x16}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:49 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:49 executing program 0:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

17:47:49 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

[  522.189788] binder: undelivered TRANSACTION_ERROR: 29189
[  522.223012] binder: 4616:4617 transaction failed 29189/-22, size 0-0 line 3138
[  522.224049] binder: undelivered TRANSACTION_ERROR: 29189
[  522.275126] binder_alloc: 26589: binder_alloc_buf, no vma
[  522.275149] binder: 4639:4642 transaction failed 29189/-3, size 0-0 line 3284
[  522.275571] binder: undelivered TRANSACTION_ERROR: 29189
[  522.306927] binder: 4631:4643 transaction failed 29189/-22, size 0-0 line 3138
[  522.401890] binder: BINDER_SET_CONTEXT_MGR already set
[  522.401938] binder: 4635:4637 ioctl 40046207 0 returned -16
[  522.402329] binder_alloc: 25308: binder_alloc_buf, no vma
[  522.402393] binder: 4635:4637 transaction failed 29189/-3, size 0-0 line 3284
[  522.430847] binder: BINDER_SET_CONTEXT_MGR already set
[  522.430854] binder: 4654:4655 ioctl 40046207 0 returned -16
[  522.430965] binder_alloc: 24844: binder_alloc_buf, no vma
[  522.430987] binder: 4654:4655 transaction failed 29189/-3, size 0-0 line 3284
[  522.431417] binder: undelivered TRANSACTION_ERROR: 29189
17:47:49 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  522.439314] binder: undelivered TRANSACTION_ERROR: 29189
[  522.498686] binder: undelivered TRANSACTION_ERROR: 29189
17:47:50 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

[  522.564290] binder_alloc: 26589: binder_alloc_buf, no vma
[  522.564313] binder: 4662:4663 transaction failed 29189/-3, size 0-0 line 3284
17:47:50 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:50 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a8", 0x16}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  522.564664] binder: undelivered TRANSACTION_ERROR: 29189
[  522.614906] binder: 4660:4661 transaction failed 29189/-22, size 0-0 line 3138
[  522.621070] binder: BINDER_SET_CONTEXT_MGR already set
[  522.621078] binder: 4667:4670 ioctl 40046207 0 returned -16
17:47:50 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

17:47:50 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71", 0x8d, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  522.621204] binder_alloc: 24844: binder_alloc_buf, no vma
[  522.621227] binder: 4667:4670 transaction failed 29189/-3, size 0-0 line 3284
17:47:50 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  522.621665] binder: undelivered TRANSACTION_ERROR: 29189
[  522.626644] binder: undelivered TRANSACTION_ERROR: 29189
17:47:50 executing program 0:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71", 0x8d, 0x6, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:50 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

[  522.739458] binder: BINDER_SET_CONTEXT_MGR already set
[  522.739467] binder: 4669:4686 ioctl 40046207 0 returned -16
[  522.739554] binder_alloc: 25308: binder_alloc_buf, no vma
17:47:50 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008", 0x21}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  522.739572] binder: 4669:4686 transaction failed 29189/-3, size 0-0 line 3284
[  522.748585] binder: 4687:4687 transaction failed 29189/-22, size 0-0 line 3138
[  522.785648] binder: undelivered TRANSACTION_ERROR: 29189
17:47:50 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:50 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  522.810284] binder_alloc: 26589: binder_alloc_buf, no vma
[  522.810309] binder: 4682:4690 transaction failed 29189/-3, size 0-0 line 3284
17:47:50 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

[  522.810980] binder: undelivered TRANSACTION_ERROR: 29189
[  522.826935] binder: undelivered TRANSACTION_ERROR: 29189
[  522.875710] binder: BINDER_SET_CONTEXT_MGR already set
[  522.875718] binder: 4693:4696 ioctl 40046207 0 returned -16
[  522.875838] binder_alloc: 24844: binder_alloc_buf, no vma
17:47:50 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba", 0x8e, 0x0, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  522.875861] binder: 4693:4696 transaction failed 29189/-3, size 0-0 line 3284
[  522.876693] binder: undelivered TRANSACTION_ERROR: 29189
[  522.988809] binder: 4692:4695 transaction failed 29189/-22, size 0-0 line 3138
[  522.989731] binder: undelivered TRANSACTION_ERROR: 29189
[  523.006158] binder_alloc: 26589: binder_alloc_buf, no vma
[  523.006189] binder: 4708:4710 transaction failed 29189/-3, size 0-0 line 3284
[  523.006533] binder: undelivered TRANSACTION_ERROR: 29189
[  523.016540] binder: BINDER_SET_CONTEXT_MGR already set
17:47:50 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008", 0x21}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:50 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:50 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008", 0x21}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  523.016546] binder: 4713:4713 ioctl 40046207 0 returned -16
17:47:50 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  523.016658] binder_alloc: 24844: binder_alloc_buf, no vma
[  523.016676] binder: 4713:4713 transaction failed 29189/-3, size 0-0 line 3284
17:47:50 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

[  523.017083] binder: undelivered TRANSACTION_ERROR: 29189
[  523.126827] binder: 4723:4723 transaction failed 29189/-22, size 0-0 line 3138
[  523.129091] binder: BINDER_SET_CONTEXT_MGR already set
17:47:50 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba", 0x8e, 0x0, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  523.129205] binder: 4714:4716 ioctl 40046207 0 returned -16
[  523.132510] binder_alloc: 25308: binder_alloc_buf, no vma
[  523.132773] binder: 4714:4716 transaction failed 29189/-3, size 0-0 line 3284
[  523.176804] binder: undelivered TRANSACTION_ERROR: 29189
17:47:51 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

17:47:51 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:51 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008", 0x21}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  523.214198] binder_alloc: 26589: binder_alloc_buf, no vma
[  523.214219] binder: 4731:4735 transaction failed 29189/-3, size 0-0 line 3284
17:47:51 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008", 0x21}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:51 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

[  523.214457] binder: undelivered TRANSACTION_ERROR: 29189
[  523.275211] binder: BINDER_SET_CONTEXT_MGR already set
[  523.275219] binder: 4740:4740 ioctl 40046207 0 returned -16
[  523.275919] binder_alloc: 24844: binder_alloc_buf, no vma
[  523.275937] binder: 4740:4740 transaction failed 29189/-3, size 0-0 line 3284
[  523.276395] binder: undelivered TRANSACTION_ERROR: 29189
[  523.396418] binder: BINDER_SET_CONTEXT_MGR already set
17:47:51 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, 0x0, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  523.396461] binder: 4747:4749 ioctl 40046207 0 returned -16
[  523.397712] binder_alloc: 25308: binder_alloc_buf, no vma
17:47:51 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:51 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c000100", 0x26}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:51 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba", 0x8e, 0x0, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  523.397779] binder: 4747:4749 transaction failed 29189/-3, size 0-0 line 3284
[  523.422335] binder_alloc: 26589: binder_alloc_buf, no vma
17:47:51 executing program 0:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba", 0x8e, 0x0, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:51 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

[  523.422354] binder: 4748:4755 transaction failed 29189/-3, size 0-0 line 3284
[  523.422725] binder: undelivered TRANSACTION_ERROR: 29189
[  523.436474] binder: undelivered TRANSACTION_ERROR: 29189
17:47:51 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, 0x0, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  523.453578] binder: 4756:4756 transaction failed 29189/-22, size 0-0 line 3138
[  523.476021] binder: undelivered TRANSACTION_ERROR: 29189
[  523.511186] binder: 4730:4757 transaction failed 29189/-22, size 0-0 line 3138
17:47:51 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

[  523.566519] binder: undelivered TRANSACTION_ERROR: 29189
[  523.599366] binder: BINDER_SET_CONTEXT_MGR already set
[  523.599373] binder: 4771:4771 ioctl 40046207 0 returned -16
17:47:51 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x280)
r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000100))
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, 0x0, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r5, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  523.599451] binder_alloc: 24844: binder_alloc_buf, no vma
17:47:51 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c000100", 0x26}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  523.599469] binder: 4771:4771 transaction failed 29189/-3, size 0-0 line 3284
[  523.599947] binder: undelivered TRANSACTION_ERROR: 29189
17:47:51 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, 0x0, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  523.654285] binder_alloc: 26589: binder_alloc_buf, no vma
17:47:51 executing program 0:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba", 0x8e, 0x0, 0x0, 0x1, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  523.654308] binder: 4769:4782 transaction failed 29189/-3, size 0-0 line 3284
17:47:51 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

17:47:51 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba", 0x8e, 0x6, 0x0, 0x0, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:51 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x280)
r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000100))
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, 0x0, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r5, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  523.654888] binder: undelivered TRANSACTION_ERROR: 29189
[  523.783934] binder: 4781:4793 transaction failed 29189/-22, size 0-0 line 3138
[  523.807202] binder: BINDER_SET_CONTEXT_MGR already set
[  523.808089] binder: 4767:4776 ioctl 40046207 0 returned -16
[  523.811980] binder_alloc: 25308: binder_alloc_buf, no vma
17:47:52 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c000100", 0x26}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:52 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

[  523.812261] binder: 4767:4776 transaction failed 29189/-3, size 0-0 line 3284
17:47:52 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840), 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  523.856029] binder: undelivered TRANSACTION_ERROR: 29189
[  524.004830] binder: 4813:4813 transaction failed 29189/-22, size 0-0 line 3138
[  524.118740] binder: 4814:4817 transaction failed 29189/-22, size 0-0 line 3138
17:47:52 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x280)
r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000100))
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, 0x0, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r5, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  524.160319] binder: undelivered TRANSACTION_ERROR: 29189
17:47:52 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c000100000019", 0x29}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:52 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba", 0x8e, 0x6, 0x0, 0x0, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  524.196160] binder: BINDER_SET_CONTEXT_MGR already set
[  524.196168] binder: 4833:4833 ioctl 40046207 0 returned -16
[  524.196250] binder_alloc: 24844: binder_alloc_buf, no vma
17:47:52 executing program 0:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  524.196267] binder: 4833:4833 transaction failed 29189/-3, size 0-0 line 3284
[  524.196536] binder: undelivered TRANSACTION_ERROR: 29189
17:47:52 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)

[  524.286261] binder: 4842:4842 transaction failed 29189/-22, size 0-0 line 3138
17:47:52 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840), 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  524.288591] binder: BINDER_SET_CONTEXT_MGR already set
17:47:52 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  524.288665] binder: 4823:4826 ioctl 40046207 0 returned -16
[  524.292632] binder_alloc: 25308: binder_alloc_buf, no vma
[  524.294019] binder: 4823:4826 transaction failed 29189/-3, size 0-0 line 3284
[  524.336304] binder: undelivered TRANSACTION_ERROR: 29189
[  524.427053] binder: 4844:4846 transaction failed 29189/-22, size 0-0 line 3138
[  524.455889] binder: undelivered TRANSACTION_ERROR: 29189
[  524.614366] binder: 4869:4869 transaction failed 29189/-22, size 0-0 line 3138
[  524.628939] binder: BINDER_SET_CONTEXT_MGR already set
17:47:52 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

17:47:52 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)

17:47:52 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c000100000019", 0x29}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:52 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba", 0x8e, 0x6, 0x0, 0x0, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  524.628983] binder: 4861:4864 ioctl 40046207 0 returned -16
[  524.646484] binder_alloc: 25308: binder_alloc_buf, no vma
[  524.649019] binder: 4861:4864 transaction failed 29189/-3, size 0-0 line 3284
17:47:52 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840), 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  524.695942] binder: undelivered TRANSACTION_ERROR: 29189
[  524.812217] binder: BINDER_SET_CONTEXT_MGR already set
17:47:52 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  524.812225] binder: 4898:4898 ioctl 40046207 0 returned -16
[  524.812940] binder_alloc: 24844: binder_alloc_buf, no vma
[  524.812965] binder: 4898:4898 transaction failed 29189/-3, size 0-0 line 3284
[  524.813262] binder: undelivered TRANSACTION_ERROR: 29189
[  524.870280] binder: 4895:4895 transaction failed 29189/-22, size 0-0 line 3138
[  524.905919] binder: undelivered TRANSACTION_ERROR: 29189
17:47:52 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

[  524.919537] binder: BINDER_SET_CONTEXT_MGR already set
[  524.919545] binder: 4907:4907 ioctl 40046207 0 returned -16
17:47:52 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)

[  524.919626] binder_alloc: 25308: binder_alloc_buf, no vma
[  524.919642] binder: 4907:4907 transaction failed 29189/-3, size 0-0 line 3284
17:47:52 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x0, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

17:47:52 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c000100000019", 0x29}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  525.001399] binder: 4919:4919 transaction failed 29189/-22, size 0-0 line 3138
[  525.008659] binder: 4910:4924 ioctl c0306201 0 returned -14
[  525.015871] binder: BINDER_SET_CONTEXT_MGR already set
17:47:53 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  525.015878] binder: 4913:4917 ioctl 40046207 0 returned -16
[  525.015990] binder_alloc: 24844: binder_alloc_buf, no vma
17:47:53 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r6, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0)
sendfile(r6, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r7, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba", 0x8e, 0x6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r9 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r9, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r10, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r11 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r12 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r12, 0x0)
ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:53 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

[  525.016012] binder: 4913:4917 transaction failed 29189/-3, size 0-0 line 3284
[  525.016474] binder: undelivered TRANSACTION_ERROR: 29189
[  525.161028] binder: BINDER_SET_CONTEXT_MGR already set
[  525.161037] binder: 4934:4934 ioctl 40046207 0 returned -16
17:47:53 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)

[  525.161129] binder_alloc: 25308: binder_alloc_buf, no vma
[  525.161149] binder: 4934:4934 transaction failed 29189/-3, size 0-0 line 3284
17:47:53 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x0, 0x0, 0x5093, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

17:47:53 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900", 0x2a}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  525.164102] binder: 4931:4931 transaction failed 29189/-22, size 0-0 line 3138
17:47:53 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  525.299007] binder: 4942:4948 ioctl c0306201 0 returned -14
17:47:53 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)

17:47:53 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  525.342483] binder: 4943:4946 transaction failed 29189/-22, size 0-0 line 3138
[  525.376093] binder: undelivered TRANSACTION_ERROR: 29189
17:47:53 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r6, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0)
sendfile(r6, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r7, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba", 0x8e, 0x6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r9 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r9, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r10, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r11 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r12 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r12, 0x0)
ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  525.442201] binder: BINDER_SET_CONTEXT_MGR already set
[  525.442209] binder: 4957:4960 ioctl 40046207 0 returned -16
[  525.442348] binder_alloc: 25308: binder_alloc_buf, no vma
17:47:53 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  525.442376] binder: 4957:4960 transaction failed 29189/-3, size 0-0 line 3284
[  525.486353] binder: undelivered TRANSACTION_ERROR: 29189
17:47:53 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)

[  525.510061] binder: 4967:4967 transaction failed 29189/-22, size 0-0 line 3138
17:47:53 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

17:47:53 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  525.519646] binder: 4966:4970 ioctl c0306201 0 returned -14
17:47:53 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900", 0x2a}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  525.640485] binder: 4973:4975 transaction failed 29189/-22, size 0-0 line 3138
[  525.665846] binder: undelivered TRANSACTION_ERROR: 29189
[  525.721877] binder: BINDER_SET_CONTEXT_MGR already set
17:47:53 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680))
clock_gettime(0x0, &(0x7f0000000740))
r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)

[  525.721884] binder: 4995:4995 ioctl 40046207 0 returned -16
[  525.721963] binder_alloc: 25308: binder_alloc_buf, no vma
17:47:53 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r6, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0)
sendfile(r6, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r7, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba", 0x8e, 0x6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r9 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r9, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r10, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r11 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r12 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r12, 0x0)
ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:53 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  525.721980] binder: 4995:4995 transaction failed 29189/-3, size 0-0 line 3284
[  525.798996] binder: 4998:4998 transaction failed 29189/-22, size 0-0 line 3138
17:47:53 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

17:47:53 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  525.861763] binder_alloc: 24844: binder_alloc_buf, no vma
[  525.861780] binder: 5007:5007 transaction failed 29189/-3, size 0-0 line 3284
[  525.862213] binder: undelivered TRANSACTION_ERROR: 29189
[  526.023856] binder: BINDER_SET_CONTEXT_MGR already set
[  526.023863] binder: 5026:5026 ioctl 40046207 0 returned -16
[  526.023936] binder_alloc: 25308: binder_alloc_buf, no vma
[  526.023960] binder: 5026:5026 transaction failed 29189/-3, size 0-0 line 3284
[  526.032935] binder_alloc: 24844: binder_alloc_buf, no vma
[  526.032962] binder: 5031:5031 transaction failed 29189/-3, size 0-0 line 3284
[  526.033371] binder: undelivered TRANSACTION_ERROR: 29189
[  526.034985] binder: 5012:5032 transaction failed 29189/-22, size 0-0 line 3138
[  526.050151] binder: 5030:5030 transaction failed 29189/-22, size 0-0 line 3138
[  526.076337] binder: undelivered TRANSACTION_ERROR: 29189
17:47:54 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680))
r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)

[  526.080245] binder: undelivered TRANSACTION_ERROR: 29189
[  526.229750] binder: BINDER_SET_CONTEXT_MGR already set
17:47:54 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900", 0x2a}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  526.229758] binder: 5053:5053 ioctl 40046207 0 returned -16
[  526.229844] binder_alloc: 25308: binder_alloc_buf, no vma
17:47:54 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:54 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

17:47:54 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  526.229862] binder: 5053:5053 transaction failed 29189/-3, size 0-0 line 3284
[  526.246601] binder_alloc: 24844: binder_alloc_buf, no vma
[  526.246619] binder: 5057:5057 transaction failed 29189/-3, size 0-0 line 3284
[  526.247273] binder: undelivered TRANSACTION_ERROR: 29189
[  526.323568] binder: 5059:5059 transaction failed 29189/-22, size 0-0 line 3138
[  526.342813] binder: 5046:5049 transaction failed 29189/-22, size 0-0 line 3138
[  526.391296] binder: undelivered TRANSACTION_ERROR: 29189
17:47:54 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba", 0x8e, 0x6, 0x0, 0x0, r6}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:54 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)

[  526.501571] binder: BINDER_SET_CONTEXT_MGR already set
[  526.501580] binder: 5080:5080 ioctl 40046207 0 returned -16
[  526.501672] binder_alloc: 25308: binder_alloc_buf, no vma
[  526.501690] binder: 5080:5080 transaction failed 29189/-3, size 0-0 line 3284
17:47:54 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c0001000000190015", 0x2b}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(0x0, 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  526.508739] binder: BINDER_SET_CONTEXT_MGR already set
17:47:54 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

17:47:54 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)

[  526.508746] binder: 5084:5084 ioctl 40046207 0 returned -16
[  526.553805] binder: 5087:5087 transaction failed 29189/-22, size 0-0 line 3138
17:47:54 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:54 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  526.586618] binder: undelivered TRANSACTION_ERROR: 29189
[  526.714454] binder: 5083:5089 transaction failed 29189/-22, size 0-0 line 3138
[  526.737832] binder: BINDER_SET_CONTEXT_MGR already set
17:47:54 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba", 0x8e, 0x6, 0x0, 0x0, r6}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  526.737839] binder: 5102:5102 ioctl 40046207 0 returned -16
[  526.739286] binder_alloc: 25308: binder_alloc_buf, no vma
17:47:54 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)

[  526.739305] binder: 5102:5102 transaction failed 29189/-3, size 0-0 line 3284
[  526.755698] binder: undelivered TRANSACTION_ERROR: 29189
[  526.773097] binder: BINDER_SET_CONTEXT_MGR already set
[  526.773105] binder: 5107:5107 ioctl 40046207 0 returned -16
17:47:54 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c0001000000190015", 0x2b}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(0x0, 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:54 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  526.868762] binder: 5117:5117 transaction failed 29189/-22, size 0-0 line 3138
[  527.037745] binder: BINDER_SET_CONTEXT_MGR already set
[  527.037753] binder: 5129:5129 ioctl 40046207 0 returned -16
17:47:54 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

17:47:54 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
clock_gettime(0x0, &(0x7f0000000680))
r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)

[  527.188724] binder: 5145:5145 transaction failed 29189/-22, size 0-0 line 3138
[  527.408118] binder: 5154:5160 transaction failed 29189/-22, size 0-0 line 3138
17:47:54 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  527.447254] binder: undelivered TRANSACTION_ERROR: 29189
[  527.497246] binder: BINDER_SET_CONTEXT_MGR already set
[  527.497255] binder: 5172:5176 ioctl 40046207 0 returned -16
[  527.497353] binder: 5172:5176 ioctl c0306201 0 returned -14
[  527.501500] binder: 5177:5177 transaction failed 29189/-22, size 0-0 line 3138
[  527.542095] binder: BINDER_SET_CONTEXT_MGR already set
17:47:55 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba", 0x8e, 0x6, 0x0, 0x0, r6}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:55 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
clock_gettime(0x0, &(0x7f0000000680))
r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)

[  527.542147] binder: 5163:5167 ioctl 40046207 0 returned -16
[  527.546178] binder: undelivered TRANSACTION_ERROR: 29189
[  527.550613] binder: 5183:5185 unknown command 25344
[  527.550623] binder: 5183:5185 ioctl c0306201 20000440 returned -22
17:47:55 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)

17:47:55 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  527.556734] binder_alloc: 25308: binder_alloc_buf, no vma
[  527.556844] binder: 5163:5167 transaction failed 29189/-3, size 0-0 line 3284
[  527.608908] binder: undelivered TRANSACTION_ERROR: 29189
17:47:55 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000080))
syz_open_dev$binder(0x0, 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

17:47:55 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
clock_gettime(0x0, &(0x7f0000000680))
r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)

17:47:55 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c0001000000190015", 0x2b}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(0x0, 0x0, 0x0)
r9 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  527.730714] binder: 5196:5196 transaction failed 29189/-22, size 0-0 line 3138
[  527.743759] binder: BINDER_SET_CONTEXT_MGR already set
[  527.743767] binder: 5203:5203 ioctl 40046207 0 returned -16
[  527.743844] binder: 5203:5203 ioctl c0306201 0 returned -14
[  527.762519] binder: 5197:5200 unknown command 25344
[  527.762527] binder: 5197:5200 ioctl c0306201 20000440 returned -22
17:47:55 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)

[  527.765799] binder: undelivered TRANSACTION_ERROR: 29189
[  527.789373] binder: BINDER_SET_CONTEXT_MGR already set
[  527.789381] binder: 5207:5207 ioctl 40046207 0 returned -16
17:47:55 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
clock_gettime(0x0, &(0x7f0000000680))
r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)

17:47:55 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba", 0x8e, 0x6, 0x0, 0x0, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  527.789461] binder_alloc: 25308: binder_alloc_buf, no vma
17:47:55 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000080))
syz_open_dev$binder(0x0, 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  527.789478] binder: 5207:5207 transaction failed 29189/-3, size 0-0 line 3284
[  527.799398] binder: 5188:5189 transaction failed 29189/-22, size 0-0 line 3138
17:47:55 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  527.836224] binder: undelivered TRANSACTION_ERROR: 29189
[  527.923271] binder: 5215:5218 unknown command 25344
[  527.923280] binder: 5215:5218 ioctl c0306201 20000440 returned -22
17:47:55 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)

17:47:55 executing program 3:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
clock_gettime(0x0, &(0x7f0000000680))
r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)

[  527.960319] binder: BINDER_SET_CONTEXT_MGR already set
[  527.960326] binder: 5223:5223 ioctl 40046207 0 returned -16
[  528.079664] binder: 5227:5227 transaction failed 29189/-22, size 0-0 line 3138
[  528.127609] binder: undelivered TRANSACTION_ERROR: 29189
[  528.161300] binder: 5228:5232 transaction failed 29189/-22, size 0-0 line 3138
17:47:55 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c0001000000190015", 0x2b}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  528.167117] binder: BINDER_SET_CONTEXT_MGR already set
17:47:55 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  528.167169] binder: 5229:5231 ioctl 40046207 0 returned -16
[  528.168867] binder_alloc: 25308: binder_alloc_buf, no vma
17:47:55 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000080))
syz_open_dev$binder(0x0, 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

17:47:55 executing program 3:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
clock_gettime(0x0, &(0x7f0000000680))
r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)

[  528.169221] binder: 5229:5231 transaction failed 29189/-3, size 0-0 line 3284
[  528.200385] binder: 5238:5239 unknown command 4219648
[  528.200393] binder: 5238:5239 ioctl c0306201 20000440 returned -22
17:47:55 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

17:47:55 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba", 0x8e, 0x6, 0x0, 0x0, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  528.215794] binder: undelivered TRANSACTION_ERROR: 29189
[  528.216573] binder: undelivered TRANSACTION_ERROR: 29189
[  528.219676] binder: BINDER_SET_CONTEXT_MGR already set
[  528.219683] binder: 5244:5244 ioctl 40046207 0 returned -16
[  528.365686] binder: 5254:5256 unknown command 4219648
[  528.365695] binder: 5254:5256 ioctl c0306201 20000440 returned -22
17:47:55 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e", 0x4c, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  528.413033] binder: BINDER_SET_CONTEXT_MGR already set
[  528.413040] binder: 5261:5261 ioctl 40046207 0 returned -16
[  528.433723] binder: 5264:5264 transaction failed 29189/-22, size 0-0 line 3138
[  528.455918] binder: undelivered TRANSACTION_ERROR: 29189
17:47:56 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c0001000000190015", 0x2b}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  528.590607] binder: BINDER_SET_CONTEXT_MGR already set
[  528.590661] binder: 5265:5271 ioctl 40046207 0 returned -16
[  528.602310] binder: 5277:5280 unknown command 4219648
17:47:56 executing program 3:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
clock_gettime(0x0, &(0x7f0000000680))
r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)

[  528.602321] binder: 5277:5280 ioctl c0306201 20000440 returned -22
17:47:56 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba", 0x8e, 0x6, 0x0, 0x0, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  528.608441] binder: 5263:5284 transaction failed 29189/-22, size 0-0 line 3138
17:47:56 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)

17:47:56 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

[  528.613034] binder_alloc: 25308: binder_alloc_buf, no vma
[  528.613488] binder: 5265:5271 transaction failed 29189/-3, size 0-0 line 3284
17:47:56 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
clock_gettime(0x0, &(0x7f0000000680))
r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)

17:47:56 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e", 0x4c, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  528.614379] binder: undelivered TRANSACTION_ERROR: 29189
[  528.656390] binder: undelivered TRANSACTION_ERROR: 29189
[  528.667898] binder: BINDER_SET_CONTEXT_MGR already set
[  528.667905] binder: 5288:5288 ioctl 40046207 0 returned -16
[  528.756094] binder: 5293:5293 transaction failed 29189/-22, size 0-0 line 3138
17:47:56 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c0001000000190015", 0x2b}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:56 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  528.878177] binder_alloc: 26589: binder_alloc_buf, no vma
17:47:56 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

17:47:56 executing program 3:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
clock_gettime(0x0, &(0x7f0000000680))
r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)

17:47:56 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e", 0x4c, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  528.878208] binder: 5296:5297 transaction failed 29189/-3, size 0-0 line 3284
[  528.916115] binder: undelivered TRANSACTION_ERROR: 29189
[  528.964544] binder: BINDER_SET_CONTEXT_MGR already set
[  528.964552] binder: 5306:5308 ioctl 40046207 0 returned -16
[  529.040830] binder: 5302:5304 transaction failed 29189/-22, size 0-0 line 3138
17:47:56 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba", 0x8e, 0x6, 0x0, 0x0, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, 0x0, 0x0)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  529.046381] binder: 5315:5315 transaction failed 29189/-22, size 0-0 line 3138
[  529.075850] binder: undelivered TRANSACTION_ERROR: 29189
[  529.167018] binder: BINDER_SET_CONTEXT_MGR already set
[  529.167071] binder: 5318:5321 ioctl 40046207 0 returned -16
17:47:56 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
clock_gettime(0x0, &(0x7f0000000680))
r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)

17:47:56 executing program 2:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)

[  529.177212] binder_alloc: 25308: binder_alloc_buf, no vma
[  529.177274] binder: 5318:5321 transaction failed 29189/-3, size 0-0 line 3284
17:47:56 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)

17:47:56 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c0001000000190015", 0x2b}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r8 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  529.177945] binder: undelivered TRANSACTION_ERROR: 29189
[  529.196331] binder: BINDER_SET_CONTEXT_MGR already set
[  529.196357] binder: 5319:5320 ioctl 40046207 0 returned -16
17:47:56 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, 0x0)
setitimer(0x1, &(0x7f0000000780)={{r1, r2/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mice(0x0, 0x0, 0x280)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100))
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d", 0x72, 0x6, 0x0, 0x1, r3}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  529.197898] binder_alloc: 26589: binder_alloc_buf, no vma
[  529.198064] binder: 5319:5320 transaction failed 29189/-3, size 0-0 line 3284
[  529.199519] binder: undelivered TRANSACTION_ERROR: 29189
[  529.235919] binder: BINDER_SET_CONTEXT_MGR already set
[  529.235926] binder: 5330:5330 ioctl 40046207 0 returned -16
[  529.433617] binder: BINDER_SET_CONTEXT_MGR already set
[  529.433624] binder: 5347:5347 ioctl 40046207 0 returned -16
[  529.433713] binder_alloc: 26589: binder_alloc_buf, no vma
[  529.433729] binder: 5347:5347 transaction failed 29189/-3, size 0-0 line 3284
[  529.434021] binder: undelivered TRANSACTION_ERROR: 29189
17:47:56 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
clock_gettime(0x0, &(0x7f0000000680))
r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)

17:47:56 executing program 4:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0xfffffcca, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r4=>0x0, <r5=>0x0})
setitimer(0x1, &(0x7f0000000780)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000840)=0x5, 0xffffffffffffff66)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba", 0x8e, 0x6, 0x0, 0x0, r6}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, 0x0, 0x0)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1}, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070454c6fc25bf106b9df5cd3e531b6fa0dcfe50ca8a0c324a94035b0bb04981a270031a923cdaf52e3bf5b3691929bb140d0c3a3d1f980ef42b013d6f3b664a26305f246bd3db69fcceaa859e72e231aa0fbfd5f94c0879ebc5f0e911f2adf477d5f69aad50d20b7be5f150208822098e8d75ef8f80d2c4c3286b67b7d74acc19fee8e4259063736e9e347c6f0b65b2f83c44f42243556f627506f5fdab30a138eb53c4718c5a3e48b74c5b7dc429fac61f8cdd744acbf9adcf4f388e5c7385f5efa6d61747777")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  529.456636] binder: 5335:5355 transaction failed 29189/-22, size 0-0 line 3138
[  529.495731] binder: undelivered TRANSACTION_ERROR: 29189
[  529.600063] binder: 5334:5358 transaction failed 29189/-22, size 0-0 line 3138
[  529.661780] binder: undelivered TRANSACTION_ERROR: 29189
[  529.668761] binder: BINDER_SET_CONTEXT_MGR already set
[  529.668769] binder: 5370:5370 ioctl 40046207 0 returned -16
[  529.697451] binder: BINDER_SET_CONTEXT_MGR already set
17:47:57 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c0001000000190015", 0x2b}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:57 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)

17:47:57 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20004c08)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000680)={0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000740)={<r2=>0x0, <r3=>0x0})
setitimer(0x1, &(0x7f0000000780)={{0x0, r1/1000+30000}, {r2, r3/1000+30000}}, &(0x7f00000007c0))
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100))
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x4, 0x0, 0x5093, &(0x7f0000000080))
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000380))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c0001000000190015", 0x2b}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r8 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

17:47:57 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
clock_gettime(0x0, &(0x7f0000000680))
r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}, &(0x7f0000000380))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)

[  529.697459] binder: 5368:5368 ioctl 40046207 0 returned -16
[  529.697531] binder_alloc: 25308: binder_alloc_buf, no vma
[  529.697548] binder: 5368:5368 transaction failed 29189/-3, size 0-0 line 3284
[  529.710577] binder: 5373:5373 transaction failed 29189/-22, size 0-0 line 3138
[  529.728415] binder: undelivered TRANSACTION_ERROR: 29189
[  529.798138] binder: BINDER_SET_CONTEXT_MGR already set
[  529.798181] binder: 5363:5367 ioctl 40046207 0 returned -16
[  529.798918] binder_alloc: 26589: binder_alloc_buf, no vma
[  529.799100] binder: 5363:5367 transaction failed 29189/-3, size 0-0 line 3284
[  529.800093] binder: undelivered TRANSACTION_ERROR: 29189
[  529.927919] binder: BINDER_SET_CONTEXT_MGR already set
[  529.927927] binder: 5393:5393 ioctl 40046207 0 returned -16
[  529.942659] binder: BINDER_SET_CONTEXT_MGR already set
[  529.942667] binder: 5392:5392 ioctl 40046207 0 returned -16
[  529.942755] binder_alloc: 25308: binder_alloc_buf, no vma
[  529.942773] binder: 5392:5392 transaction failed 29189/-3, size 0-0 line 3284
[  529.983108] binder: undelivered TRANSACTION_ERROR: 29189
[  530.020568] binder: 5404:5404 transaction failed 29189/-22, size 0-0 line 3138
[  530.056362] binder: undelivered TRANSACTION_ERROR: 29189
[  530.082577] binder: 5388:5391 transaction failed 29189/-22, size 0-0 line 3138
[  530.120140] binder: BINDER_SET_CONTEXT_MGR already set
[  530.120194] binder: 5396:5401 ioctl 40046207 0 returned -16
[  530.126769] binder: BINDER_SET_CONTEXT_MGR already set
[  530.126776] binder: 5414:5414 ioctl 40046207 0 returned -16
[  530.126858] binder_alloc: 25308: binder_alloc_buf, no vma
[  530.126876] binder: 5414:5414 transaction failed 29189/-3, size 0-0 line 3284
[  530.134077] binder_alloc: 26589: binder_alloc_buf, no vma
[  530.134389] binder: 5396:5401 transaction failed 29189/-3, size 0-0 line 3284
[  530.136592] binder: undelivered TRANSACTION_ERROR: 29189
[  530.141256] binder: undelivered TRANSACTION_ERROR: 29189
[  530.184585] binder: BINDER_SET_CONTEXT_MGR already set
[  530.184592] binder: 5417:5417 ioctl 40046207 0 returned -16
[  530.190518] binder: 5417:5417 unknown command 25344
[  530.190526] binder: 5417:5417 ioctl c0306201 20000440 returned -22
[  530.330029] binder: 5427:5427 transaction failed 29189/-22, size 0-0 line 3138
[  530.367252] binder: undelivered TRANSACTION_ERROR: 29189
[  530.373284] binder: BINDER_SET_CONTEXT_MGR already set
[  530.373292] binder: 5430:5436 ioctl 40046207 0 returned -16
[  530.373394] binder: 5430:5436 unknown command 25344
[  530.373402] binder: 5430:5436 ioctl c0306201 20000440 returned -22
[  530.437430] binder: 5426:5432 transaction failed 29189/-22, size 0-0 line 3138
[  530.444251] binder: BINDER_SET_CONTEXT_MGR already set
[  530.444259] binder: 5443:5443 ioctl 40046207 0 returned -16
[  530.444332] binder_alloc: 25308: binder_alloc_buf, no vma
[  530.444349] binder: 5443:5443 transaction failed 29189/-3, size 0-0 line 3284
[  530.466776] binder: undelivered TRANSACTION_ERROR: 29189
[  530.594104] binder: BINDER_SET_CONTEXT_MGR already set
[  530.594111] binder: 5458:5458 ioctl 40046207 0 returned -16
[  530.594165] binder: 5458:5458 unknown command 25344
[  530.594172] binder: 5458:5458 ioctl c0306201 20000440 returned -22
[  530.596068] binder: BINDER_SET_CONTEXT_MGR already set
[  530.596118] binder: 5441:5446 ioctl 40046207 0 returned -16
[  530.596678] binder_alloc: 26589: binder_alloc_buf, no vma
[  530.596848] binder: 5441:5446 transaction failed 29189/-3, size 0-0 line 3284
[  530.597564] binder: undelivered TRANSACTION_ERROR: 29189
[  530.699222] binder: 5454:5468 transaction failed 29189/-22, size 0-0 line 3138
[  530.750180] binder: 5463:5467 transaction failed 29189/-22, size 0-0 line 3138
[  530.791643] binder: undelivered TRANSACTION_ERROR: 29189
[  530.851077] binder: BINDER_SET_CONTEXT_MGR already set
[  530.851085] binder: 5481:5481 ioctl 40046207 0 returned -16
[  530.852035] binder: 5481:5481 unknown command 4219648
[  530.852042] binder: 5481:5481 ioctl c0306201 20000440 returned -22
[  530.958716] binder: undelivered TRANSACTION_ERROR: 29189
[  531.006558] binder_alloc: 26589: binder_alloc_buf, no vma
[  531.006919] binder: 5475:5476 transaction failed 29189/-3, size 0-0 line 3284
[  531.057365] binder: undelivered TRANSACTION_ERROR: 29189
[  531.080889] binder: BINDER_SET_CONTEXT_MGR already set
[  531.080903] binder: 5485:5487 ioctl 40046207 0 returned -16
[  531.084379] binder: BINDER_SET_CONTEXT_MGR already set
[  531.084386] binder: 5502:5502 ioctl 40046207 0 returned -16
[  531.084439] binder: 5502:5502 unknown command 4219648
[  531.084446] binder: 5502:5502 ioctl c0306201 20000440 returned -22
[  531.094509] binder_alloc: 25308: binder_alloc_buf, no vma
[  531.094588] binder: 5485:5487 transaction failed 29189/-3, size 0-0 line 3284
[  531.148307] binder: undelivered TRANSACTION_ERROR: 29189
[  531.165029] binder: 5491:5492 transaction failed 29189/-22, size 0-0 line 3138
[  531.206129] binder: undelivered TRANSACTION_ERROR: 29189
[  531.247791] binder: 5509:5509 transaction failed 29189/-22, size 0-0 line 3138
[  531.290735] binder: undelivered TRANSACTION_ERROR: 29189
[  531.364978] binder: BINDER_SET_CONTEXT_MGR already set
[  531.364986] binder: 5523:5523 ioctl 40046207 0 returned -16
[  531.365044] binder: 5523:5523 unknown command 4219648
[  531.365050] binder: 5523:5523 ioctl c0306201 20000440 returned -22
[  531.449860] binder_alloc: 26589: binder_alloc_buf, no vma
[  531.450091] binder: 5511:5512 transaction failed 29189/-3, size 0-0 line 3284
[  531.494990] binder: BINDER_SET_CONTEXT_MGR already set
[  531.495031] binder: 5519:5522 ioctl 40046207 0 returned -16
[  531.497463] binder_alloc: 25308: binder_alloc_buf, no vma
[  531.501747] binder: 5519:5522 transaction failed 29189/-3, size 0-0 line 3284
[  531.505814] binder: undelivered TRANSACTION_ERROR: 29189
[  531.507616] binder: 5526:5528 transaction failed 29189/-22, size 0-0 line 3138
[  531.536177] binder: undelivered TRANSACTION_ERROR: 29189
[  531.536198] binder: undelivered TRANSACTION_ERROR: 29189
[  531.601649] binder: 5539:5539 transaction failed 29189/-22, size 0-0 line 3138
[  531.737761] binder: BINDER_SET_CONTEXT_MGR already set
[  531.737844] binder: 5537:5543 ioctl 40046207 0 returned -16
[  531.739013] binder_alloc: 24844: binder_alloc_buf, no vma
[  531.739316] binder: 5537:5543 transaction failed 29189/-3, size 0-0 line 3284
[  531.776779] binder: undelivered TRANSACTION_ERROR: 29189
[  531.854663] binder: BINDER_SET_CONTEXT_MGR already set
[  531.854674] binder: 5552:5557 ioctl 40046207 0 returned -16
[  531.868034] binder_alloc: 25308: binder_alloc_buf, no vma
[  531.868101] binder: 5552:5557 transaction failed 29189/-3, size 0-0 line 3284
[  531.875294] binder: 5567:5567 transaction failed 29189/-22, size 0-0 line 3138
[  531.881506] binder: 5555:5558 transaction failed 29189/-22, size 0-0 line 3138
[  531.903164] binder_alloc: 26589: binder_alloc_buf, no vma
[  531.903193] binder: 5551:5553 transaction failed 29189/-3, size 0-0 line 3284
[  531.918413] binder: undelivered TRANSACTION_ERROR: 29189
[  531.918460] binder: undelivered TRANSACTION_ERROR: 29189
[  531.920391] binder: undelivered TRANSACTION_ERROR: 29189
[  532.072409] binder_alloc: 24844: binder_alloc_buf, no vma
[  532.072429] binder: 5581:5581 transaction failed 29189/-3, size 0-0 line 3284
[  532.163089] binder: 5580:5594 transaction failed 29189/-22, size 0-0 line 3138
[  532.225741] binder: undelivered TRANSACTION_ERROR: 29189
[  532.232912] binder_alloc: 26589: binder_alloc_buf, no vma
[  532.233006] binder: 5587:5592 transaction failed 29189/-3, size 0-0 line 3284
[  532.274121] binder: BINDER_SET_CONTEXT_MGR already set
[  532.274176] binder: 5584:5588 ioctl 40046207 0 returned -16
[  532.278926] binder: undelivered TRANSACTION_ERROR: 29189
[  532.297245] binder_alloc: 25308: binder_alloc_buf, no vma
[  532.297456] binder: 5584:5588 transaction failed 29189/-3, size 0-0 line 3284
[  532.349166] binder: undelivered TRANSACTION_ERROR: 29189
[  532.411512] binder: 5595:5597 transaction failed 29189/-22, size 0-0 line 3138
[  532.456504] binder: undelivered TRANSACTION_ERROR: 29189
[  532.511749] binder_alloc: 26589: binder_alloc_buf, no vma
[  532.511768] binder: 5615:5615 transaction failed 29189/-3, size 0-0 line 3284
[  532.524464] binder: 5614:5614 transaction failed 29189/-22, size 0-0 line 3138
[  532.556816] binder: undelivered TRANSACTION_ERROR: 29189
[  532.584355] binder_alloc: 24844: binder_alloc_buf, no vma
[  532.584421] binder: 5605:5606 transaction failed 29189/-3, size 0-0 line 3284
[  532.617564] binder: undelivered TRANSACTION_ERROR: 29189
[  532.647945] binder: BINDER_SET_CONTEXT_MGR already set
[  532.647998] binder: 5619:5620 ioctl 40046207 0 returned -16
[  532.649082] binder_alloc: 25308: binder_alloc_buf, no vma
[  532.649552] binder: 5619:5620 transaction failed 29189/-3, size 0-0 line 3284
[  532.686512] binder: undelivered TRANSACTION_ERROR: 29189
[  532.774647] binder: 5634:5634 transaction failed 29189/-22, size 0-0 line 3138
[  532.802066] binder: 5624:5625 transaction failed 29189/-22, size 0-0 line 3138
[  532.805990] binder: undelivered TRANSACTION_ERROR: 29189
[  532.826400] binder: undelivered TRANSACTION_ERROR: 29189
[  532.860424] binder_alloc: 26589: binder_alloc_buf, no vma
[  532.860511] binder: 5633:5635 transaction failed 29189/-3, size 0-0 line 3284
[  532.905839] binder: undelivered TRANSACTION_ERROR: 29189
[  532.958316] binder: BINDER_SET_CONTEXT_MGR already set
[  532.958324] binder: 5646:5646 ioctl 40046207 0 returned -16
[  532.958415] binder_alloc: 25308: binder_alloc_buf, no vma
[  532.958433] binder: 5646:5646 transaction failed 29189/-3, size 0-0 line 3284
[  533.012488] binder_alloc: 24844: binder_alloc_buf, no vma
[  533.012801] binder: 5639:5640 transaction failed 29189/-3, size 0-0 line 3284
[  533.046551] binder: undelivered TRANSACTION_ERROR: 29189
[  533.126548] binder: 5651:5654 transaction failed 29189/-22, size 0-0 line 3138
[  533.144797] binder: 5665:5665 transaction failed 29189/-22, size 0-0 line 3138
[  533.166844] binder: undelivered TRANSACTION_ERROR: 29189
[  533.196037] binder: BINDER_SET_CONTEXT_MGR already set
[  533.196044] binder: 5671:5671 ioctl 40046207 0 returned -16
[  533.196131] binder_alloc: 25308: binder_alloc_buf, no vma
[  533.196149] binder: 5671:5671 transaction failed 29189/-3, size 0-0 line 3284
[  533.314882] binder_alloc: 24844: binder_alloc_buf, no vma
[  533.314909] binder: 5674:5676 transaction failed 29189/-3, size 0-0 line 3284
[  533.369625] binder: undelivered TRANSACTION_ERROR: 29189
[  533.401728] binder: 5684:5684 transaction failed 29189/-22, size 0-0 line 3138
[  533.482467] binder: 5680:5682 transaction failed 29189/-22, size 0-0 line 3138
[  533.515930] binder: undelivered TRANSACTION_ERROR: 29189
[  533.614941] binder: BINDER_SET_CONTEXT_MGR already set
[  533.615006] binder: 5693:5694 ioctl 40046207 0 returned -16
[  533.617024] binder_alloc: 25308: binder_alloc_buf, no vma
[  533.617248] binder: 5693:5694 transaction failed 29189/-3, size 0-0 line 3284
[  533.667891] binder: undelivered TRANSACTION_ERROR: 29189
[  533.910606] binder: 5719:5719 transaction failed 29189/-22, size 0-0 line 3138
[  533.965963] binder: undelivered TRANSACTION_ERROR: 29189
[  533.983414] binder: 5710:5716 transaction failed 29189/-22, size 0-0 line 3138
[  534.024286] binder: undelivered TRANSACTION_ERROR: 29189
[  534.127550] binder: BINDER_SET_CONTEXT_MGR already set
[  534.127557] binder: 5736:5736 ioctl 40046207 0 returned -16
[  534.127631] binder_alloc: 25308: binder_alloc_buf, no vma
[  534.127649] binder: 5736:5736 transaction failed 29189/-3, size 0-0 line 3284
[  534.251261] binder: 5743:5743 transaction failed 29189/-22, size 0-0 line 3138
[  534.386184] binder_alloc: 24844: binder_alloc_buf, no vma
[  534.386204] binder: 5762:5762 transaction failed 29189/-3, size 0-0 line 3284
[  534.389626] binder: 5741:5742 transaction failed 29189/-22, size 0-0 line 3138
[  534.436201] binder: undelivered TRANSACTION_ERROR: 29189
[  534.456794] binder: BINDER_SET_CONTEXT_MGR already set
[  534.456801] binder: 5756:5771 ioctl 40046207 0 returned -16
[  534.456916] binder_alloc: 25308: binder_alloc_buf, no vma
[  534.456939] binder: 5756:5771 transaction failed 29189/-3, size 0-0 line 3284
[  534.503136] binder: 5772:5772 transaction failed 29189/-22, size 0-0 line 3138
[  534.506340] binder: undelivered TRANSACTION_ERROR: 29189
[  534.742350] binder: 5791:5791 transaction failed 29189/-22, size 0-0 line 3138
[  534.753413] binder: 5779:5782 transaction failed 29189/-22, size 0-0 line 3138
[  534.786510] binder: undelivered TRANSACTION_ERROR: 29189
[  534.872748] binder: BINDER_SET_CONTEXT_MGR already set
[  534.872803] binder: 5784:5793 ioctl 40046207 0 returned -16
[  534.874516] binder_alloc: 25308: binder_alloc_buf, no vma
[  534.875921] binder: 5784:5793 transaction failed 29189/-3, size 0-0 line 3284
[  534.908708] binder: undelivered TRANSACTION_ERROR: 29189
[  535.025915] binder: 5811:5811 transaction failed 29189/-22, size 0-0 line 3138
[  535.246756] binder: 5826:5826 transaction failed 29189/-22, size 0-0 line 3138
[  535.304565] binder_alloc: 24844: binder_alloc_buf, no vma
[  535.304591] binder: 5817:5821 transaction failed 29189/-3, size 0-0 line 3284
[  535.308123] binder: 5815:5823 transaction failed 29189/-22, size 0-0 line 3138
[  535.338623] binder: BINDER_SET_CONTEXT_MGR already set
[  535.338668] binder: 5816:5818 ioctl 40046207 0 returned -16
[  535.340460] binder_alloc: 25308: binder_alloc_buf, no vma
[  535.340634] binder: 5816:5818 transaction failed 29189/-3, size 0-0 line 3284
[  535.341674] binder: undelivered TRANSACTION_ERROR: 29189
[  535.359438] binder: undelivered TRANSACTION_ERROR: 29189
[  535.375792] binder: undelivered TRANSACTION_ERROR: 29189
[  535.551806] binder: 5842:5842 transaction failed 29189/-22, size 0-0 line 3138
[  535.641312] binder: 5849:5852 transaction failed 29189/-22, size 0-0 line 3138
[  535.675622] binder: BINDER_SET_CONTEXT_MGR already set
[  535.675632] binder: 5848:5853 ioctl 40046207 0 returned -16
[  535.686997] binder: undelivered TRANSACTION_ERROR: 29189
[  535.688218] binder_alloc: 25308: binder_alloc_buf, no vma
[  535.688284] binder: 5848:5853 transaction failed 29189/-3, size 0-0 line 3284
[  535.736157] binder: undelivered TRANSACTION_ERROR: 29189
[  535.905721] binder: 5871:5871 transaction failed 29189/-22, size 0-0 line 3138
[  536.308916] binder: 5883:5883 transaction failed 29189/-22, size 0-0 line 3138
[  536.356006] binder: undelivered TRANSACTION_ERROR: 29189
[  536.366651] binder: BINDER_SET_CONTEXT_MGR already set
[  536.366716] binder: 5875:5879 ioctl 40046207 0 returned -16
[  536.368838] binder_alloc: 25308: binder_alloc_buf, no vma
[  536.369171] binder: 5875:5879 transaction failed 29189/-3, size 0-0 line 3284
[  536.398399] binder: undelivered TRANSACTION_ERROR: 29189
[  536.475240] binder: 5874:5886 transaction failed 29189/-22, size 0-0 line 3138
[  536.517736] binder: undelivered TRANSACTION_ERROR: 29189
[  536.640682] binder: 5906:5906 transaction failed 29189/-22, size 0-0 line 3138
[  536.685690] binder: undelivered TRANSACTION_ERROR: 29189
[  536.694111] binder: BINDER_SET_CONTEXT_MGR already set
[  536.694165] binder: 5901:5903 ioctl 40046207 0 returned -16
[  536.694684] binder_alloc: 25308: binder_alloc_buf, no vma
[  536.694800] binder: 5901:5903 transaction failed 29189/-3, size 0-0 line 3284
[  536.725918] binder: undelivered TRANSACTION_ERROR: 29189
[  536.763803] binder: 5912:5914 transaction failed 29189/-22, size 0-0 line 3138
[  536.797133] binder: undelivered TRANSACTION_ERROR: 29189
[  536.964178] binder: 5927:5932 transaction failed 29189/-22, size 0-0 line 3138
[  537.441848] binder: 5942:5942 transaction failed 29189/-22, size 0-0 line 3138
[  537.601170] binder: BINDER_SET_CONTEXT_MGR already set
[  537.601234] binder: 5933:5945 ioctl 40046207 0 returned -16
[  537.603975] binder_alloc: 25308: binder_alloc_buf, no vma
[  537.623576] binder: 5934:5956 transaction failed 29189/-22, size 0-0 line 3138
[  537.624054] binder: 5933:5945 transaction failed 29189/-3, size 0-0 line 3284
[  537.655711] binder: undelivered TRANSACTION_ERROR: 29189
[  537.660110] binder: undelivered TRANSACTION_ERROR: 29189
[  537.761578] binder: 5969:5969 transaction failed 29189/-22, size 0-0 line 3138
[  537.806764] binder: undelivered TRANSACTION_ERROR: 29189
[  538.074807] binder: 5999:5999 transaction failed 29189/-22, size 0-0 line 3138
[  538.138171] binder: BINDER_SET_CONTEXT_MGR already set
[  538.138276] binder: 5995:5998 ioctl 40046207 0 returned -16
[  538.151364] binder_alloc: 25308: binder_alloc_buf, no vma
[  538.154010] binder: 5995:5998 transaction failed 29189/-3, size 0-0 line 3284
[  538.164058] binder: 6004:6006 transaction failed 29189/-22, size 0-0 line 3138
[  538.196265] binder: undelivered TRANSACTION_ERROR: 29189
[  538.405322] binder: 6023:6023 transaction failed 29189/-22, size 0-0 line 3138
[  538.544441] binder: 6034:6037 transaction failed 29189/-22, size 0-0 line 3138
[  538.547436] binder: BINDER_SET_CONTEXT_MGR already set
[  538.547461] binder: 6028:6032 ioctl 40046207 0 returned -16
[  538.547760] binder_alloc: 25308: binder_alloc_buf, no vma
[  538.547841] binder: 6028:6032 transaction failed 29189/-3, size 0-0 line 3284
[  538.581370] binder: undelivered TRANSACTION_ERROR: 29189
[  538.596690] binder: undelivered TRANSACTION_ERROR: 29189
[  538.670106] binder: 6047:6047 transaction failed 29189/-22, size 0-0 line 3138
[  538.887946] binder: 6063:6066 transaction failed 29189/-22, size 0-0 line 3138
[  538.926037] binder: undelivered TRANSACTION_ERROR: 29189
[  538.961673] binder: BINDER_SET_CONTEXT_MGR already set
[  538.961773] binder: 6064:6067 ioctl 40046207 0 returned -16
[  538.980251] binder: 6071:6078 transaction failed 29189/-22, size 0-0 line 3138
[  538.989438] binder_alloc: 25308: binder_alloc_buf, no vma
[  538.989466] binder: 6064:6067 transaction failed 29189/-3, size 0-0 line 3284
[  539.006287] binder: undelivered TRANSACTION_ERROR: 29189
[  539.237988] binder: 6092:6093 transaction failed 29189/-22, size 0-0 line 3138
[  539.268131] binder: undelivered TRANSACTION_ERROR: 29189
[  539.276105] binder: undelivered TRANSACTION_ERROR: 29189
[  539.278639] binder: BINDER_SET_CONTEXT_MGR already set
[  539.278667] binder: 6094:6096 ioctl 40046207 0 returned -16
[  539.293563] binder_alloc: 25308: binder_alloc_buf, no vma
[  539.293794] binder: 6094:6096 transaction failed 29189/-3, size 0-0 line 3284
[  539.328577] binder: undelivered TRANSACTION_ERROR: 29189
[  539.520260] binder: 6123:6123 transaction failed 29189/-22, size 0-0 line 3138
[  539.558593] binder: undelivered TRANSACTION_ERROR: 29189
[  539.567983] binder: BINDER_SET_CONTEXT_MGR already set
[  539.568017] binder: 6119:6121 ioctl 40046207 0 returned -16
[  539.578695] binder_alloc: 25308: binder_alloc_buf, no vma
[  539.578946] binder: 6119:6121 transaction failed 29189/-3, size 0-0 line 3284
[  539.591006] binder: 6112:6117 transaction failed 29189/-22, size 0-0 line 3138
[  539.606643] binder: undelivered TRANSACTION_ERROR: 29189
[  539.646464] binder: undelivered TRANSACTION_ERROR: 29189
[  539.851752] binder: 6151:6151 transaction failed 29189/-22, size 0-0 line 3138
[  539.909125] binder: BINDER_SET_CONTEXT_MGR already set
[  539.909209] binder: 6144:6147 ioctl 40046207 0 returned -16
[  539.913137] binder_alloc: 25308: binder_alloc_buf, no vma
[  539.913202] binder: 6144:6147 transaction failed 29189/-3, size 0-0 line 3284
[  539.956324] binder: undelivered TRANSACTION_ERROR: 29189
[  540.101227] binder: BINDER_SET_CONTEXT_MGR already set
[  540.101234] binder: 6174:6174 ioctl 40046207 0 returned -16
[  540.101309] binder_alloc: 25308: binder_alloc_buf, no vma
[  540.101327] binder: 6174:6174 transaction failed 29189/-3, size 0-0 line 3284
[  540.203206] binder: 6180:6180 transaction failed 29189/-22, size 0-0 line 3138
[  540.237619] binder: undelivered TRANSACTION_ERROR: 29189
[  540.283388] binder: 6175:6178 transaction failed 29189/-22, size 0-0 line 3138
[  540.326153] binder: undelivered TRANSACTION_ERROR: 29189
[  540.472091] binder: BINDER_SET_CONTEXT_MGR already set
[  540.472143] binder: 6195:6196 ioctl 40046207 0 returned -16
[  540.473005] binder_alloc: 25308: binder_alloc_buf, no vma
[  540.473280] binder: 6195:6196 transaction failed 29189/-3, size 0-0 line 3284
[  540.496782] binder: undelivered TRANSACTION_ERROR: 29189
[  540.595194] binder: 6203:6206 transaction failed 29189/-22, size 0-0 line 3138
[  540.655990] binder: undelivered TRANSACTION_ERROR: 29189
[  540.704377] binder: 6220:6220 transaction failed 29189/-22, size 0-0 line 3138
[  540.830175] binder: BINDER_SET_CONTEXT_MGR already set
[  540.830227] binder: 6224:6225 ioctl 40046207 0 returned -16
[  540.831132] binder_alloc: 25308: binder_alloc_buf, no vma
[  540.831405] binder: 6224:6225 transaction failed 29189/-3, size 0-0 line 3284
[  540.868448] binder: undelivered TRANSACTION_ERROR: 29189
[  540.891715] binder: 6237:6237 transaction failed 29189/-22, size 0-0 line 3138
[  541.028556] binder: 6248:6248 transaction failed 29189/-22, size 0-0 line 3138
[  541.211102] binder: BINDER_SET_CONTEXT_MGR already set
[  541.229409] binder: 6252:6253 ioctl 40046207 0 returned -16
[  541.230415] binder_alloc: 25308: binder_alloc_buf, no vma
[  541.230444] binder: 6252:6253 transaction failed 29189/-3, size 0-0 line 3284
[  541.239425] binder: 6258:6265 transaction failed 29189/-22, size 0-0 line 3138
[  541.265911] binder: undelivered TRANSACTION_ERROR: 29189
[  541.269911] binder: undelivered TRANSACTION_ERROR: 29189
[  541.343739] binder: 6273:6273 transaction failed 29189/-22, size 0-0 line 3138
[  541.505094] binder: BINDER_SET_CONTEXT_MGR already set
[  541.505101] binder: 6287:6287 ioctl 40046207 0 returned -16
[  541.505244] binder_alloc: 25308: binder_alloc_buf, no vma
[  541.505263] binder: 6287:6287 transaction failed 29189/-3, size 0-0 line 3284
[  541.594737] binder: 6288:6290 transaction failed 29189/-22, size 0-0 line 3138
[  541.626499] binder: undelivered TRANSACTION_ERROR: 29189
[  541.676681] binder: 6300:6300 transaction failed 29189/-22, size 0-0 line 3138
[  541.882177] binder: BINDER_SET_CONTEXT_MGR already set
[  541.882228] binder: 6311:6316 ioctl 40046207 0 returned -16
[  541.910588] binder_alloc: 25308: binder_alloc_buf, no vma
[  541.910730] binder: 6311:6316 transaction failed 29189/-3, size 0-0 line 3284
[  541.926977] binder: 6315:6318 transaction failed 29189/-22, size 0-0 line 3138
[  541.956104] binder: undelivered TRANSACTION_ERROR: 29189
[  541.975715] binder: undelivered TRANSACTION_ERROR: 29189
[  542.166438] binder: BINDER_SET_CONTEXT_MGR already set
[  542.166446] binder: 6345:6345 ioctl 40046207 0 returned -16
[  542.166522] binder_alloc: 25308: binder_alloc_buf, no vma
[  542.166540] binder: 6345:6345 transaction failed 29189/-3, size 0-0 line 3284
[  542.330597] binder: 6348:6363 transaction failed 29189/-22, size 0-0 line 3138
[  542.367302] binder: undelivered TRANSACTION_ERROR: 29189
[  542.479084] binder: BINDER_SET_CONTEXT_MGR already set
[  542.479143] binder: 6369:6372 ioctl 40046207 0 returned -16
[  542.480567] binder_alloc: 25308: binder_alloc_buf, no vma
[  542.480630] binder: 6369:6372 transaction failed 29189/-3, size 0-0 line 3284
[  542.525186] binder: undelivered TRANSACTION_ERROR: 29189
[  542.710290] binder: 6377:6380 transaction failed 29189/-22, size 0-0 line 3138
[  542.756812] binder: undelivered TRANSACTION_ERROR: 29189
[  542.936635] binder: BINDER_SET_CONTEXT_MGR already set
[  542.938890] binder: 6401:6402 ioctl 40046207 0 returned -16
[  542.940623] binder_alloc: 25308: binder_alloc_buf, no vma
[  542.940691] binder: 6401:6402 transaction failed 29189/-3, size 0-0 line 3284
[  542.981242] binder: undelivered TRANSACTION_ERROR: 29189
[  543.119035] binder: 6413:6415 transaction failed 29189/-22, size 0-0 line 3138
[  543.170788] binder: undelivered TRANSACTION_ERROR: 29189
[  543.382269] binder: BINDER_SET_CONTEXT_MGR already set
[  543.382320] binder: 6431:6434 ioctl 40046207 0 returned -16
[  543.384333] binder_alloc: 25308: binder_alloc_buf, no vma
[  543.389472] binder: 6431:6434 transaction failed 29189/-3, size 0-0 line 3284
[  543.427157] binder: undelivered TRANSACTION_ERROR: 29189
[  543.512350] binder: 6440:6444 transaction failed 29189/-22, size 0-0 line 3138
[  543.547613] binder: undelivered TRANSACTION_ERROR: 29189
[  543.718310] binder: BINDER_SET_CONTEXT_MGR already set
[  543.718360] binder: 6460:6465 ioctl 40046207 0 returned -16
[  543.745651] binder_alloc: 25308: binder_alloc_buf, no vma
[  543.745729] binder: 6460:6465 transaction failed 29189/-3, size 0-0 line 3284
[  543.766815] binder: undelivered TRANSACTION_ERROR: 29189
[  543.892189] binder: 6475:6476 transaction failed 29189/-22, size 0-0 line 3138
[  543.928723] binder: undelivered TRANSACTION_ERROR: 29189
[  544.013515] binder: BINDER_SET_CONTEXT_MGR already set
[  544.013524] binder: 6485:6489 ioctl 40046207 0 returned -16
[  544.018971] binder_alloc: 25308: binder_alloc_buf, no vma
[  544.019042] binder: 6485:6489 transaction failed 29189/-3, size 0-0 line 3284
[  544.056593] binder: undelivered TRANSACTION_ERROR: 29189
[  544.295678] binder: BINDER_SET_CONTEXT_MGR already set
[  544.295729] binder: 6509:6510 ioctl 40046207 0 returned -16
[  544.296619] binder_alloc: 25308: binder_alloc_buf, no vma
[  544.296943] binder: 6509:6510 transaction failed 29189/-3, size 0-0 line 3284
[  544.308448] binder: 6522:6522 ioctl c0306201 0 returned -14
[  544.328114] binder: undelivered TRANSACTION_ERROR: 29189
[  544.370962] binder: 6504:6530 transaction failed 29189/-22, size 0-0 line 3138
[  544.406078] binder: undelivered TRANSACTION_ERROR: 29189
[  544.590101] binder: BINDER_SET_CONTEXT_MGR already set
[  544.590109] binder: 6535:6540 ioctl 40046207 0 returned -16
[  544.597362] binder: 6548:6548 ioctl c0306201 0 returned -14
[  544.603478] binder_alloc: 25308: binder_alloc_buf, no vma
[  544.603721] binder: 6535:6540 transaction failed 29189/-3, size 0-0 line 3284
[  544.640002] binder: undelivered TRANSACTION_ERROR: 29189
[  544.717309] binder: 6543:6550 transaction failed 29189/-22, size 0-0 line 3138
[  544.771389] binder: undelivered TRANSACTION_ERROR: 29189
[  544.897481] binder: 6564:6564 ioctl c0306201 0 returned -14
[  545.015706] binder: BINDER_SET_CONTEXT_MGR already set
[  545.015716] binder: 6565:6566 ioctl 40046207 0 returned -16
[  545.018813] binder_alloc: 25308: binder_alloc_buf, no vma
[  545.019079] binder: 6565:6566 transaction failed 29189/-3, size 0-0 line 3284
[  545.035917] binder: undelivered TRANSACTION_ERROR: 29189
[  545.292409] binder: BINDER_SET_CONTEXT_MGR already set
[  545.292417] binder: 6606:6606 ioctl 40046207 0 returned -16
[  545.292495] binder_alloc: 25308: binder_alloc_buf, no vma
[  545.292513] binder: 6606:6606 transaction failed 29189/-3, size 0-0 line 3284
[  545.550686] binder: 6617:6620 transaction failed 29189/-22, size 0-0 line 3138
[  545.580173] binder: BINDER_SET_CONTEXT_MGR already set
[  545.580180] binder: 6631:6631 ioctl 40046207 0 returned -16
[  545.580261] binder_alloc: 25308: binder_alloc_buf, no vma
[  545.580342] binder: 6631:6631 transaction failed 29189/-3, size 0-0 line 3284
[  545.598759] binder: undelivered TRANSACTION_ERROR: 29189
[  545.891373] binder: BINDER_SET_CONTEXT_MGR already set
[  545.891383] binder: 6648:6662 ioctl 40046207 0 returned -16
[  545.891478] binder_alloc: 25308: binder_alloc_buf, no vma
[  545.891498] binder: 6648:6662 transaction failed 29189/-3, size 0-0 line 3284
[  545.986540] binder: 6647:6649 transaction failed 29189/-22, size 0-0 line 3138
[  546.006418] binder: undelivered TRANSACTION_ERROR: 29189
[  546.028418] binder: undelivered TRANSACTION_ERROR: 29189
[  546.239922] binder: BINDER_SET_CONTEXT_MGR already set
[  546.239930] binder: 6684:6684 ioctl 40046207 0 returned -16
[  546.240016] binder_alloc: 25308: binder_alloc_buf, no vma
[  546.240034] binder: 6684:6684 transaction failed 29189/-3, size 0-0 line 3284
[  546.407696] binder: 6686:6689 transaction failed 29189/-22, size 0-0 line 3138
[  546.460084] binder: undelivered TRANSACTION_ERROR: 29189
[  546.627417] binder: BINDER_SET_CONTEXT_MGR already set
[  546.627461] binder: 6706:6707 ioctl 40046207 0 returned -16
[  546.628100] binder_alloc: 25308: binder_alloc_buf, no vma
[  546.628265] binder: 6706:6707 transaction failed 29189/-3, size 0-0 line 3284
[  546.665731] binder: undelivered TRANSACTION_ERROR: 29189
[  546.826727] binder: 6723:6727 transaction failed 29189/-22, size 0-0 line 3138
[  546.866987] binder: undelivered TRANSACTION_ERROR: 29189
[  546.893620] binder: BINDER_SET_CONTEXT_MGR already set
[  546.893628] binder: 6741:6741 ioctl 40046207 0 returned -16
[  546.893716] binder_alloc: 25308: binder_alloc_buf, no vma
[  546.893732] binder: 6741:6741 transaction failed 29189/-3, size 0-0 line 3284
[  547.258612] binder: BINDER_SET_CONTEXT_MGR already set
[  547.258652] binder: 6756:6760 ioctl 40046207 0 returned -16
[  547.260180] binder_alloc: 25308: binder_alloc_buf, no vma
[  547.260427] binder: 6756:6760 transaction failed 29189/-3, size 0-0 line 3284
[  547.296173] binder: undelivered TRANSACTION_ERROR: 29189
[  547.502936] binder: 6773:6775 transaction failed 29189/-22, size 0-0 line 3138
[  547.537311] binder: undelivered TRANSACTION_ERROR: 29189
[  547.565971] binder: BINDER_SET_CONTEXT_MGR already set
[  547.566030] binder: 6791:6794 ioctl 40046207 0 returned -16
[  547.567186] binder_alloc: 25308: binder_alloc_buf, no vma
[  547.567429] binder: 6791:6794 transaction failed 29189/-3, size 0-0 line 3284
[  547.595708] binder: undelivered TRANSACTION_ERROR: 29189
[  547.877350] binder: BINDER_SET_CONTEXT_MGR already set
[  547.877433] binder: 6817:6819 ioctl 40046207 0 returned -16
[  547.888455] binder_alloc: 25308: binder_alloc_buf, no vma
[  547.888533] binder: 6817:6819 transaction failed 29189/-3, size 0-0 line 3284
[  547.926088] binder: undelivered TRANSACTION_ERROR: 29189
[  547.976698] binder: 6811:6814 transaction failed 29189/-22, size 0-0 line 3138
[  548.018975] binder: undelivered TRANSACTION_ERROR: 29189
[  548.141028] binder: 6840:6840 unknown command 25344
[  548.141035] binder: 6840:6840 ioctl c0306201 20000440 returned -22
[  548.356250] binder: BINDER_SET_CONTEXT_MGR already set
[  548.356303] binder: 6846:6848 ioctl 40046207 0 returned -16
[  548.356902] binder_alloc: 25308: binder_alloc_buf, no vma
[  548.357105] binder: 6846:6848 transaction failed 29189/-3, size 0-0 line 3284
[  548.396807] binder: undelivered TRANSACTION_ERROR: 29189
[  548.403076] binder: 6845:6849 transaction failed 29189/-22, size 0-0 line 3138
[  548.446714] binder: 6866:6866 unknown command 25344
[  548.446722] binder: 6866:6866 ioctl c0306201 20000440 returned -22
[  548.456895] binder: undelivered TRANSACTION_ERROR: 29189
[  548.720400] binder: 6886:6886 unknown command 25344
[  548.720408] binder: 6886:6886 ioctl c0306201 20000440 returned -22
[  548.726215] binder: BINDER_SET_CONTEXT_MGR already set
[  548.726224] binder: 6879:6881 ioctl 40046207 0 returned -16
[  548.727909] binder_alloc: 25308: binder_alloc_buf, no vma
[  548.727975] binder: 6879:6881 transaction failed 29189/-3, size 0-0 line 3284
[  548.756022] binder: undelivered TRANSACTION_ERROR: 29189
[  548.932746] binder: 6889:6908 transaction failed 29189/-22, size 0-0 line 3138
[  548.975802] binder: undelivered TRANSACTION_ERROR: 29189
[  549.053952] binder: 6911:6911 unknown command 4219648
[  549.053960] binder: 6911:6911 ioctl c0306201 20000440 returned -22
[  549.087849] binder: BINDER_SET_CONTEXT_MGR already set
[  549.087858] binder: 6905:6909 ioctl 40046207 0 returned -16
[  549.088423] binder_alloc: 25308: binder_alloc_buf, no vma
[  549.088625] binder: 6905:6909 transaction failed 29189/-3, size 0-0 line 3284
[  549.125697] binder: undelivered TRANSACTION_ERROR: 29189
[  549.325063] binder: 6944:6944 unknown command 4219648
[  549.325071] binder: 6944:6944 ioctl c0306201 20000440 returned -22
[  549.419432] binder: BINDER_SET_CONTEXT_MGR already set
[  549.419464] binder: 6939:6942 ioctl 40046207 0 returned -16
[  549.420978] binder: 6926:6930 transaction failed 29189/-22, size 0-0 line 3138
[  549.449827] binder_alloc: 25308: binder_alloc_buf, no vma
[  549.449855] binder: 6939:6942 transaction failed 29189/-3, size 0-0 line 3284
[  549.465736] binder: undelivered TRANSACTION_ERROR: 29189
[  549.486373] binder: undelivered TRANSACTION_ERROR: 29189
[  549.610294] binder: 6963:6963 unknown command 4219648
[  549.610301] binder: 6963:6963 ioctl c0306201 20000440 returned -22
[  549.789755] binder: BINDER_SET_CONTEXT_MGR already set
[  549.789762] binder: 6984:6984 ioctl 40046207 0 returned -16
[  549.789854] binder_alloc: 25308: binder_alloc_buf, no vma
[  549.789873] binder: 6984:6984 transaction failed 29189/-3, size 0-0 line 3284
[  550.062206] binder: 6997:6998 transaction failed 29189/-22, size 0-0 line 3138
[  550.125500] binder: undelivered TRANSACTION_ERROR: 29189
[  550.173696] binder_alloc: 25308: binder_alloc_buf, no vma
[  550.174070] binder: 7006:7007 transaction failed 29189/-3, size 0-0 line 3284
[  550.232358] binder: undelivered TRANSACTION_ERROR: 29189
[  550.460181] binder: 7033:7037 transaction failed 29189/-22, size 0-0 line 3138
[  550.495720] binder: undelivered TRANSACTION_ERROR: 29189
[  550.549637] binder: BINDER_SET_CONTEXT_MGR already set
[  550.549680] binder: 7049:7051 ioctl 40046207 0 returned -16
[  550.550597] binder_alloc: 25308: binder_alloc_buf, no vma
[  550.550962] binder: 7049:7051 transaction failed 29189/-3, size 0-0 line 3284
[  550.595723] binder: undelivered TRANSACTION_ERROR: 29189
[  550.700687] binder: 7073:7073 transaction failed 29189/-22, size 0-0 line 3138
[  550.821900] binder: BINDER_SET_CONTEXT_MGR already set
[  550.821907] binder: 7087:7087 ioctl 40046207 0 returned -16
[  550.821996] binder_alloc: 25308: binder_alloc_buf, no vma
[  550.822014] binder: 7087:7087 transaction failed 29189/-3, size 0-0 line 3284
[  551.027262] binder: 7095:7098 transaction failed 29189/-22, size 0-0 line 3138
[  551.077348] binder: undelivered TRANSACTION_ERROR: 29189
[  551.186296] binder: BINDER_SET_CONTEXT_MGR already set
[  551.186309] binder: 7107:7110 ioctl 40046207 0 returned -16
[  551.188820] binder_alloc: 25308: binder_alloc_buf, no vma
[  551.189005] binder: 7107:7110 transaction failed 29189/-3, size 0-0 line 3284
[  551.237654] binder: undelivered TRANSACTION_ERROR: 29189
[  551.513031] binder: 7126:7133 transaction failed 29189/-22, size 0-0 line 3138
[  551.526527] binder: BINDER_SET_CONTEXT_MGR already set
[  551.526537] binder: 7142:7143 ioctl 40046207 0 returned -16
[  551.535633] binder_alloc: 25308: binder_alloc_buf, no vma
[  551.535970] binder: 7142:7143 transaction failed 29189/-3, size 0-0 line 3284
[  551.555777] binder: undelivered TRANSACTION_ERROR: 29189
[  551.577115] binder: undelivered TRANSACTION_ERROR: 29189
[  551.795303] binder: BINDER_SET_CONTEXT_MGR already set
[  551.795311] binder: 7170:7170 ioctl 40046207 0 returned -16
[  551.795398] binder_alloc: 25308: binder_alloc_buf, no vma
[  551.795417] binder: 7170:7170 transaction failed 29189/-3, size 0-0 line 3284
[  551.874267] binder: 7163:7166 transaction failed 29189/-22, size 0-0 line 3138
[  551.917119] binder: undelivered TRANSACTION_ERROR: 29189
[  552.091642] binder: BINDER_SET_CONTEXT_MGR already set
[  552.091683] binder: 7182:7186 ioctl 40046207 0 returned -16
[  552.092738] binder_alloc: 25308: binder_alloc_buf, no vma
[  552.092806] binder: 7182:7186 transaction failed 29189/-3, size 0-0 line 3284
[  552.136980] binder: undelivered TRANSACTION_ERROR: 29189
[  552.310146] binder: 7196:7199 transaction failed 29189/-22, size 0-0 line 3138
[  552.353381] binder: undelivered TRANSACTION_ERROR: 29189
[  552.437536] binder: BINDER_SET_CONTEXT_MGR already set
[  552.437588] binder: 7212:7213 ioctl 40046207 0 returned -16
[  552.447190] binder_alloc: 25308: binder_alloc_buf, no vma
[  552.447510] binder: 7212:7213 transaction failed 29189/-3, size 0-0 line 3284
[  552.515269] binder: undelivered TRANSACTION_ERROR: 29189
[  552.725545] binder: 7228:7230 transaction failed 29189/-22, size 0-0 line 3138
[  552.766784] binder: undelivered TRANSACTION_ERROR: 29189
[  552.804852] binder: BINDER_SET_CONTEXT_MGR already set
[  552.804900] binder: 7242:7243 ioctl 40046207 0 returned -16
[  552.813417] binder_alloc: 25308: binder_alloc_buf, no vma
[  552.813660] binder: 7242:7243 transaction failed 29189/-3, size 0-0 line 3284
[  552.836591] binder: undelivered TRANSACTION_ERROR: 29189
[  553.097128] binder: BINDER_SET_CONTEXT_MGR already set
[  553.097178] binder: 7263:7268 ioctl 40046207 0 returned -16
[  553.099549] binder_alloc: 25308: binder_alloc_buf, no vma
[  553.109837] binder: 7263:7268 transaction failed 29189/-3, size 0-0 line 3284
[  553.145106] binder: 7261:7265 transaction failed 29189/-22, size 0-0 line 3138
[  553.145906] binder: undelivered TRANSACTION_ERROR: 29189
[  553.196690] binder: undelivered TRANSACTION_ERROR: 29189
[  553.464930] binder: BINDER_SET_CONTEXT_MGR already set
[  553.464983] binder: 7292:7295 ioctl 40046207 0 returned -16
[  553.467547] binder_alloc: 25308: binder_alloc_buf, no vma
[  553.467612] binder: 7292:7295 transaction failed 29189/-3, size 0-0 line 3284
[  553.497527] binder: undelivered TRANSACTION_ERROR: 29189
[  553.505534] binder: 7307:7307 transaction failed 29189/-22, size 0-0 line 3138
[  553.857891] binder: BINDER_SET_CONTEXT_MGR already set
[  553.857954] binder: 7324:7327 ioctl 40046207 0 returned -16
[  553.858857] binder_alloc: 25308: binder_alloc_buf, no vma
[  553.859191] binder: 7324:7327 transaction failed 29189/-3, size 0-0 line 3284
[  553.897593] binder: undelivered TRANSACTION_ERROR: 29189
[  554.165081] binder: 7351:7352 transaction failed 29189/-22, size 0-0 line 3138
[  554.216327] binder: undelivered TRANSACTION_ERROR: 29189
[  554.237047] binder: BINDER_SET_CONTEXT_MGR already set
[  554.237057] binder: 7365:7367 ioctl 40046207 0 returned -16
[  554.243883] binder_alloc: 25308: binder_alloc_buf, no vma
[  554.244039] binder: 7365:7367 transaction failed 29189/-3, size 0-0 line 3284
[  554.279074] binder: undelivered TRANSACTION_ERROR: 29189
[  554.588576] binder: 7386:7401 transaction failed 29189/-22, size 0-0 line 3138
[  554.610663] binder: BINDER_SET_CONTEXT_MGR already set
[  554.610671] binder: 7388:7403 ioctl 40046207 0 returned -16
[  554.610762] binder_alloc: 25308: binder_alloc_buf, no vma
[  554.610780] binder: 7388:7403 transaction failed 29189/-3, size 0-0 line 3284
[  554.626017] binder: undelivered TRANSACTION_ERROR: 29189
[  554.666516] binder: undelivered TRANSACTION_ERROR: 29189
[  554.975562] binder: 7413:7415 transaction failed 29189/-22, size 0-0 line 3138
[  555.015810] binder: undelivered TRANSACTION_ERROR: 29189
[  555.297532] binder: BINDER_SET_CONTEXT_MGR already set
[  555.297595] binder: 7423:7431 ioctl 40046207 0 returned -16
[  555.298646] binder_alloc: 25308: binder_alloc_buf, no vma
[  555.298745] binder: 7423:7431 transaction failed 29189/-3, size 0-0 line 3284
[  555.336197] binder: undelivered TRANSACTION_ERROR: 29189
[  555.355707] binder: 7424:7430 transaction failed 29189/-22, size 0-0 line 3138
[  555.389867] binder: undelivered TRANSACTION_ERROR: 29189
[  555.674051] binder: BINDER_SET_CONTEXT_MGR already set
[  555.674105] binder: 7459:7461 ioctl 40046207 0 returned -16
[  555.680011] binder_alloc: 25308: binder_alloc_buf, no vma
[  555.680253] binder: 7459:7461 transaction failed 29189/-3, size 0-0 line 3284
[  555.715750] binder: undelivered TRANSACTION_ERROR: 29189
[  555.822829] binder: 7469:7472 transaction failed 29189/-22, size 0-0 line 3138
[  555.857669] binder: undelivered TRANSACTION_ERROR: 29189
[  555.983805] binder: BINDER_SET_CONTEXT_MGR already set
[  555.983866] binder: 7488:7489 ioctl 40046207 0 returned -16
[  555.988408] binder_alloc: 25308: binder_alloc_buf, no vma
[  555.988676] binder: 7488:7489 transaction failed 29189/-3, size 0-0 line 3284
[  556.026174] binder: undelivered TRANSACTION_ERROR: 29189
[  556.191539] binder: 7503:7504 transaction failed 29189/-22, size 0-0 line 3138
[  556.238521] binder: undelivered TRANSACTION_ERROR: 29189
[  556.259181] binder: BINDER_SET_CONTEXT_MGR already set
[  556.259237] binder: 7513:7514 ioctl 40046207 0 returned -16
[  556.263404] binder_alloc: 25308: binder_alloc_buf, no vma
[  556.264008] binder: 7513:7514 transaction failed 29189/-3, size 0-0 line 3284
[  556.306002] binder: undelivered TRANSACTION_ERROR: 29189
[  556.580023] binder: BINDER_SET_CONTEXT_MGR already set
[  556.592675] binder: 7531:7535 ioctl 40046207 0 returned -16
[  556.593972] binder_alloc: 25308: binder_alloc_buf, no vma
[  556.594315] binder: 7531:7535 transaction failed 29189/-3, size 0-0 line 3284
[  556.598105] binder: 7527:7529 transaction failed 29189/-22, size 0-0 line 3138
[  556.626254] binder: undelivered TRANSACTION_ERROR: 29189
[  556.626510] binder: undelivered TRANSACTION_ERROR: 29189
[  556.852202] binder: 7560:7560 transaction failed 29189/-22, size 0-0 line 3138
[  557.108289] binder: BINDER_SET_CONTEXT_MGR already set
[  557.108337] binder: 7565:7568 ioctl 40046207 0 returned -16
[  557.109958] binder_alloc: 25308: binder_alloc_buf, no vma
[  557.110028] binder: 7565:7568 transaction failed 29189/-3, size 0-0 line 3284
[  557.147775] binder: undelivered TRANSACTION_ERROR: 29189
[  557.340058] binder: BINDER_SET_CONTEXT_MGR already set
[  557.340106] binder: 7593:7594 ioctl 40046207 0 returned -16
[  557.341021] binder_alloc: 25308: binder_alloc_buf, no vma
[  557.341184] binder: 7593:7594 transaction failed 29189/-3, size 0-0 line 3284
[  557.385662] binder: undelivered TRANSACTION_ERROR: 29189
[  557.462167] binder: 7607:7607 transaction failed 29189/-22, size 0-0 line 3138
[  557.654653] binder: BINDER_SET_CONTEXT_MGR already set
[  557.654715] binder: 7612:7615 ioctl 40046207 0 returned -16
[  557.656249] binder_alloc: 25308: binder_alloc_buf, no vma
[  557.656282] binder: 7612:7615 transaction failed 29189/-3, size 0-0 line 3284
[  557.695891] binder: undelivered TRANSACTION_ERROR: 29189
[  557.713008] binder: 7624:7624 transaction failed 29189/-22, size 0-0 line 3138
[  557.747722] binder: BINDER_SET_CONTEXT_MGR already set
[  557.747828] binder: 7622:7625 ioctl 40046207 0 returned -16
[  557.764518] binder_alloc: 26589: binder_alloc_buf, no vma
[  557.764710] binder: 7622:7625 transaction failed 29189/-3, size 0-0 line 3284
[  557.805997] binder: undelivered TRANSACTION_ERROR: 29189
[  558.014201] binder: BINDER_SET_CONTEXT_MGR already set
[  558.014292] binder: 7648:7649 ioctl 40046207 0 returned -16
[  558.046491] binder_alloc: 26589: binder_alloc_buf, no vma
[  558.046823] binder: 7648:7649 transaction failed 29189/-3, size 0-0 line 3284
[  558.098688] binder: undelivered TRANSACTION_ERROR: 29189
[  558.164724] binder: BINDER_SET_CONTEXT_MGR already set
[  558.164788] binder: 7659:7664 ioctl 40046207 0 returned -16
[  558.171488] binder_alloc: 25308: binder_alloc_buf, no vma
[  558.171711] binder: 7659:7664 transaction failed 29189/-3, size 0-0 line 3284
[  558.177626] binder: 7651:7652 transaction failed 29189/-22, size 0-0 line 3138
[  558.207317] binder: undelivered TRANSACTION_ERROR: 29189
[  558.217312] binder: undelivered TRANSACTION_ERROR: 29189
[  558.306513] binder: BINDER_SET_CONTEXT_MGR already set
[  558.306520] binder: 7678:7678 ioctl 40046207 0 returned -16
[  558.306607] binder_alloc: 26589: binder_alloc_buf, no vma
[  558.306625] binder: 7678:7678 transaction failed 29189/-3, size 0-0 line 3284
[  558.486414] binder_alloc: 25308: binder_alloc_buf, no vma
[  558.486685] binder: 7683:7685 transaction failed 29189/-3, size 0-0 line 3284
[  558.516719] binder: undelivered TRANSACTION_ERROR: 29189
[  558.552136] binder: BINDER_SET_CONTEXT_MGR already set
[  558.552144] binder: 7701:7701 ioctl 40046207 0 returned -16
[  558.563854] binder: 7689:7691 transaction failed 29189/-22, size 0-0 line 3138
[  558.606775] binder: undelivered TRANSACTION_ERROR: 29189
[  558.811916] binder: BINDER_SET_CONTEXT_MGR already set
[  558.811968] binder: 7707:7715 ioctl 40046207 0 returned -16
[  558.813158] binder_alloc: 25308: binder_alloc_buf, no vma
[  558.813470] binder: 7707:7715 transaction failed 29189/-3, size 0-0 line 3284
[  558.845879] binder: undelivered TRANSACTION_ERROR: 29189
[  558.892697] binder: BINDER_SET_CONTEXT_MGR already set
[  558.892751] binder: 7720:7723 ioctl 40046207 0 returned -16
[  558.956428] binder: 7721:7725 transaction failed 29189/-22, size 0-0 line 3138
[  559.006124] binder: undelivered TRANSACTION_ERROR: 29189
[  559.146052] binder: BINDER_SET_CONTEXT_MGR already set
[  559.146129] binder: 7741:7744 ioctl 40046207 0 returned -16
[  559.147335] binder_alloc: 25308: binder_alloc_buf, no vma
[  559.147625] binder: 7741:7744 transaction failed 29189/-3, size 0-0 line 3284
[  559.186639] binder: undelivered TRANSACTION_ERROR: 29189
[  559.332621] binder_alloc: 7764: binder_alloc_buf, no vma
[  559.332641] binder: 7764:7764 transaction failed 29189/-3, size 0-0 line 3284
[  559.337893] binder: 7754:7757 transaction failed 29189/-22, size 0-0 line 3138
[  559.386099] binder: undelivered TRANSACTION_ERROR: 29189
[  559.562099] binder: BINDER_SET_CONTEXT_MGR already set
[  559.562150] binder: 7774:7779 ioctl 40046207 0 returned -16
[  559.564686] binder_alloc: 25308: binder_alloc_buf, no vma
[  559.564752] binder: 7774:7779 transaction failed 29189/-3, size 0-0 line 3284
[  559.600750] binder: undelivered TRANSACTION_ERROR: 29189
[  559.717175] binder: BINDER_SET_CONTEXT_MGR already set
[  559.717229] binder: 7784:7787 ioctl 40046207 0 returned -16
[  559.720218] binder_alloc: 7764: binder_alloc_buf, no vma
[  559.720286] binder: 7784:7787 transaction failed 29189/-3, size 0-0 line 3284
[  559.756636] binder: undelivered TRANSACTION_ERROR: 29189
[  559.767950] binder: 7790:7791 transaction failed 29189/-22, size 0-0 line 3138
[  559.815838] binder: undelivered TRANSACTION_ERROR: 29189
[  559.838998] binder: BINDER_SET_CONTEXT_MGR already set
[  559.839005] binder: 7811:7811 ioctl 40046207 0 returned -16
[  559.839080] binder_alloc: 25308: binder_alloc_buf, no vma
[  559.839097] binder: 7811:7811 transaction failed 29189/-3, size 0-0 line 3284
[  560.021809] binder: BINDER_SET_CONTEXT_MGR already set
[  560.021858] binder: 7818:7819 ioctl 40046207 0 returned -16
[  560.025753] binder_alloc: 7764: binder_alloc_buf, no vma
[  560.025954] binder: 7818:7819 transaction failed 29189/-3, size 0-0 line 3284
[  560.076470] binder: undelivered TRANSACTION_ERROR: 29189
[  560.120122] binder: BINDER_SET_CONTEXT_MGR already set
[  560.120129] binder: 7839:7839 ioctl 40046207 0 returned -16
[  560.120212] binder_alloc: 25308: binder_alloc_buf, no vma
[  560.120231] binder: 7839:7839 transaction failed 29189/-3, size 0-0 line 3284
[  560.195489] binder: 7828:7832 transaction failed 29189/-22, size 0-0 line 3138
[  560.236190] binder: undelivered TRANSACTION_ERROR: 29189
[  560.295342] binder: BINDER_SET_CONTEXT_MGR already set
[  560.295351] binder: 7851:7851 ioctl 40046207 0 returned -16
[  560.295432] binder_alloc: 7764: binder_alloc_buf, no vma
[  560.295451] binder: 7851:7851 transaction failed 29189/-3, size 0-0 line 3284
[  560.397601] binder: BINDER_SET_CONTEXT_MGR already set
[  560.397643] binder: 7852:7856 ioctl 40046207 0 returned -16
[  560.400095] binder_alloc: 25308: binder_alloc_buf, no vma
[  560.400398] binder: 7852:7856 transaction failed 29189/-3, size 0-0 line 3284
[  560.436741] binder: undelivered TRANSACTION_ERROR: 29189
[  560.588800] binder: 7866:7868 transaction failed 29189/-22, size 0-0 line 3138
[  560.627225] binder: undelivered TRANSACTION_ERROR: 29189
[  560.723949] binder: BINDER_SET_CONTEXT_MGR already set
[  560.723958] binder: 7880:7889 ioctl 40046207 0 returned -16
[  560.724621] binder_alloc: 25308: binder_alloc_buf, no vma
[  560.724640] binder: 7880:7889 transaction failed 29189/-3, size 0-0 line 3284
[  560.771003] binder: undelivered TRANSACTION_ERROR: 29189
[  560.961578] binder: 7896:7900 transaction failed 29189/-22, size 0-0 line 3138
[  560.967702] binder_alloc: 7764: binder_alloc_buf, no vma
[  560.967771] binder: 7893:7898 transaction failed 29189/-3, size 0-0 line 3284
[  561.006668] binder: undelivered TRANSACTION_ERROR: 29189
[  561.010818] binder: undelivered TRANSACTION_ERROR: 29189
[  561.119202] binder: BINDER_SET_CONTEXT_MGR already set
[  561.119246] binder: 7909:7911 ioctl 40046207 0 returned -16
[  561.119765] binder_alloc: 25308: binder_alloc_buf, no vma
[  561.119928] binder: 7909:7911 transaction failed 29189/-3, size 0-0 line 3284
[  561.166550] binder: undelivered TRANSACTION_ERROR: 29189
[  561.308342] binder: BINDER_SET_CONTEXT_MGR already set
[  561.308396] binder: 7918:7919 ioctl 40046207 0 returned -16
[  561.393336] binder: 7922:7923 transaction failed 29189/-22, size 0-0 line 3138
[  561.397310] binder_alloc: 7764: binder_alloc_buf, no vma
[  561.397376] binder: 7924:7928 transaction failed 29189/-3, size 0-0 line 3284
[  561.426923] binder: undelivered TRANSACTION_ERROR: 29189
[  561.448162] binder: undelivered TRANSACTION_ERROR: 29189
[  561.498585] binder: BINDER_SET_CONTEXT_MGR already set
[  561.498640] binder: 7939:7943 ioctl 40046207 0 returned -16
[  561.518673] binder_alloc: 25308: binder_alloc_buf, no vma
[  561.519166] binder: 7939:7943 transaction failed 29189/-3, size 0-0 line 3284
[  561.559469] binder: undelivered TRANSACTION_ERROR: 29189
[  561.643032] binder: BINDER_SET_CONTEXT_MGR already set
[  561.643084] binder: 7950:7951 ioctl 40046207 0 returned -16
[  561.775496] binder: 7954:7960 transaction failed 29189/-22, size 0-0 line 3138
[  561.817273] binder_alloc: 7764: binder_alloc_buf, no vma
[  561.817340] binder: 7953:7958 transaction failed 29189/-3, size 0-0 line 3284
[  561.826143] binder: undelivered TRANSACTION_ERROR: 29189
[  561.846095] binder: undelivered TRANSACTION_ERROR: 29189
[  561.867179] binder: BINDER_SET_CONTEXT_MGR already set
[  561.867230] binder: 7969:7970 ioctl 40046207 0 returned -16
[  561.871711] binder_alloc: 25308: binder_alloc_buf, no vma
[  561.872492] binder: 7969:7970 transaction failed 29189/-3, size 0-0 line 3284
[  561.906061] binder: undelivered TRANSACTION_ERROR: 29189
[  561.961101] binder: BINDER_SET_CONTEXT_MGR already set
[  561.961145] binder: 7977:7980 ioctl 40046207 0 returned -16
[  562.089827] binder: 7993:7993 transaction failed 29189/-22, size 0-0 line 3138
[  562.200352] binder: BINDER_SET_CONTEXT_MGR already set
[  562.200465] binder: 7990:7995 ioctl 40046207 0 returned -16
[  562.202170] binder_alloc: 25308: binder_alloc_buf, no vma
[  562.202454] binder: 7990:7995 transaction failed 29189/-3, size 0-0 line 3284
[  562.206053] binder_alloc: 7764: binder_alloc_buf, no vma
[  562.206318] binder: 7991:7994 transaction failed 29189/-3, size 0-0 line 3284
[  562.235689] binder: undelivered TRANSACTION_ERROR: 29189
[  562.235962] binder: undelivered TRANSACTION_ERROR: 29189
[  562.255006] binder: BINDER_SET_CONTEXT_MGR already set
[  562.255055] binder: 8005:8007 ioctl 40046207 0 returned -16
[  562.499028] binder: BINDER_SET_CONTEXT_MGR already set
[  562.499192] binder: 8026:8029 ioctl 40046207 0 returned -16
[  562.500588] binder_alloc: 25308: binder_alloc_buf, no vma
[  562.500772] binder: 8026:8029 transaction failed 29189/-3, size 0-0 line 3284
[  562.546177] binder: undelivered TRANSACTION_ERROR: 29189
[  562.558747] binder: 8020:8024 transaction failed 29189/-22, size 0-0 line 3138
[  562.576499] binder: undelivered TRANSACTION_ERROR: 29189
[  562.578372] binder: BINDER_SET_CONTEXT_MGR already set
[  562.578422] binder: 8032:8035 ioctl 40046207 0 returned -16
[  562.579637] binder: BINDER_SET_CONTEXT_MGR already set
[  562.579644] binder: 8019:8022 ioctl 40046207 0 returned -16
[  562.580222] binder_alloc: 7764: binder_alloc_buf, no vma
[  562.580494] binder: 8019:8022 transaction failed 29189/-3, size 0-0 line 3284
[  562.633267] binder: undelivered TRANSACTION_ERROR: 29189
[  562.811739] binder: BINDER_SET_CONTEXT_MGR already set
[  562.811747] binder: 8063:8063 ioctl 40046207 0 returned -16
[  562.811830] binder_alloc: 25308: binder_alloc_buf, no vma
[  562.811848] binder: 8063:8063 transaction failed 29189/-3, size 0-0 line 3284
[  562.894233] binder: BINDER_SET_CONTEXT_MGR already set
[  562.894288] binder: 8057:8067 ioctl 40046207 0 returned -16
[  562.941590] binder: 8058:8061 transaction failed 29189/-22, size 0-0 line 3138
[  562.987734] binder_alloc: 7764: binder_alloc_buf, no vma
[  562.987964] binder: 8059:8064 transaction failed 29189/-3, size 0-0 line 3284
[  562.988380] binder: undelivered TRANSACTION_ERROR: 29189
[  563.016423] binder: undelivered TRANSACTION_ERROR: 29189
[  563.103873] binder: BINDER_SET_CONTEXT_MGR already set
[  563.103881] binder: 8084:8084 ioctl 40046207 0 returned -16
[  563.104740] binder_alloc: 25308: binder_alloc_buf, no vma
[  563.104759] binder: 8084:8084 transaction failed 29189/-3, size 0-0 line 3284
[  563.245588] binder: BINDER_SET_CONTEXT_MGR already set
[  563.245637] binder: 8087:8093 ioctl 40046207 0 returned -16
[  563.293591] binder_alloc: 7764: binder_alloc_buf, no vma
[  563.306785] binder: 8091:8094 transaction failed 29189/-3, size 0-0 line 3284
[  563.336063] binder: undelivered TRANSACTION_ERROR: 29189
[  563.427594] binder: 8118:8118 transaction failed 29189/-22, size 0-0 line 3138
[  563.476139] binder: undelivered TRANSACTION_ERROR: 29189
[  563.522162] binder: BINDER_SET_CONTEXT_MGR already set
[  563.522171] binder: 8113:8117 ioctl 40046207 0 returned -16
[  563.523596] binder_alloc: 25308: binder_alloc_buf, no vma
[  563.523684] binder: 8113:8117 transaction failed 29189/-3, size 0-0 line 3284
[  563.557291] binder: undelivered TRANSACTION_ERROR: 29189
[  563.676804] binder: BINDER_SET_CONTEXT_MGR already set
[  563.676813] binder: 8125:8137 ioctl 40046207 0 returned -16
[  563.783403] binder_alloc: 7764: binder_alloc_buf, no vma
[  563.783425] binder: 8130:8150 transaction failed 29189/-3, size 0-0 line 3284
[  563.806313] binder: undelivered TRANSACTION_ERROR: 29189
[  563.889861] binder: 8138:8140 transaction failed 29189/-22, size 0-0 line 3138
[  563.921753] binder: BINDER_SET_CONTEXT_MGR already set
[  563.921796] binder: 8146:8147 ioctl 40046207 0 returned -16
[  563.922709] binder_alloc: 25308: binder_alloc_buf, no vma
[  563.922943] binder: 8146:8147 transaction failed 29189/-3, size 0-0 line 3284
[  563.925649] binder: undelivered TRANSACTION_ERROR: 29189
[  563.965902] binder: undelivered TRANSACTION_ERROR: 29189
[  564.005601] binder: BINDER_SET_CONTEXT_MGR already set
[  564.005610] binder: 8157:8161 ioctl 40046207 0 returned -16
[  564.204251] binder_alloc: 7764: binder_alloc_buf, no vma
[  564.204655] binder: 8169:8172 transaction failed 29189/-3, size 0-0 line 3284
[  564.205901] binder: undelivered TRANSACTION_ERROR: 29189
[  564.314312] binder: 8176:8179 transaction failed 29189/-22, size 0-0 line 3138
[  564.346613] binder: undelivered TRANSACTION_ERROR: 29189
[  564.373734] binder: BINDER_SET_CONTEXT_MGR already set
[  564.373782] binder: 8180:8184 ioctl 40046207 0 returned -16
[  564.435753] binder: BINDER_SET_CONTEXT_MGR already set
[  564.435765] binder: 8187:8190 ioctl 40046207 0 returned -16
[  564.436432] binder_alloc: 25308: binder_alloc_buf, no vma
[  564.436758] binder: 8187:8190 transaction failed 29189/-3, size 0-0 line 3284
[  564.485883] binder: undelivered TRANSACTION_ERROR: 29189
[  564.597558] binder_alloc: 7764: binder_alloc_buf, no vma
[  564.597587] binder: 8203:8206 transaction failed 29189/-3, size 0-0 line 3284
[  564.629592] binder: BINDER_SET_CONTEXT_MGR already set
[  564.629600] binder: 8219:8219 ioctl 40046207 0 returned -16
[  564.646532] binder: undelivered TRANSACTION_ERROR: 29189
[  564.758046] binder: 8214:8217 transaction failed 29189/-22, size 0-0 line 3138
[  564.786320] binder: BINDER_SET_CONTEXT_MGR already set
[  564.786374] binder: 8220:8224 ioctl 40046207 0 returned -16
[  564.796821] binder: undelivered TRANSACTION_ERROR: 29189
[  564.802095] binder_alloc: 25308: binder_alloc_buf, no vma
[  564.802536] binder: 8220:8224 transaction failed 29189/-3, size 0-0 line 3284
[  564.846433] binder: undelivered TRANSACTION_ERROR: 29189
[  564.875790] binder: BINDER_SET_CONTEXT_MGR already set
[  564.875841] binder: 8234:8236 ioctl 40046207 0 returned -16
[  565.040290] binder_alloc: 7764: binder_alloc_buf, no vma
[  565.040358] binder: 8237:8240 transaction failed 29189/-3, size 0-0 line 3284
[  565.057381] binder: undelivered TRANSACTION_ERROR: 29189
[  565.130778] binder: 8249:8252 transaction failed 29189/-22, size 0-0 line 3138
[  565.165724] binder: undelivered TRANSACTION_ERROR: 29189
[  565.190375] binder: BINDER_SET_CONTEXT_MGR already set
[  565.190419] binder: 8257:8259 ioctl 40046207 0 returned -16
[  565.193103] binder_alloc: 25308: binder_alloc_buf, no vma
[  565.193344] binder: 8257:8259 transaction failed 29189/-3, size 0-0 line 3284
[  565.221099] binder: BINDER_SET_CONTEXT_MGR already set
[  565.221149] binder: 8262:8266 ioctl 40046207 0 returned -16
[  565.245885] binder: undelivered TRANSACTION_ERROR: 29189
[  565.551541] binder: BINDER_SET_CONTEXT_MGR already set
[  565.551582] binder: 8286:8289 ioctl 40046207 0 returned -16
[  565.552685] binder_alloc: 25308: binder_alloc_buf, no vma
[  565.553120] binder: 8286:8289 transaction failed 29189/-3, size 0-0 line 3284
[  565.555887] binder: BINDER_SET_CONTEXT_MGR already set
[  565.555938] binder: 8300:8301 ioctl 40046207 0 returned -16
[  565.582785] binder: 8283:8284 transaction failed 29189/-22, size 0-0 line 3138
[  565.586275] binder: undelivered TRANSACTION_ERROR: 29189
[  565.636233] binder: undelivered TRANSACTION_ERROR: 29189
[  565.733947] binder: BINDER_SET_CONTEXT_MGR already set
[  565.733955] binder: 8317:8317 ioctl 40046207 0 returned -16
[  565.850427] binder: BINDER_SET_CONTEXT_MGR already set
[  565.850435] binder: 8327:8327 ioctl 40046207 0 returned -16
[  565.850508] binder_alloc: 25308: binder_alloc_buf, no vma
[  565.850526] binder: 8327:8327 transaction failed 29189/-3, size 0-0 line 3284
[  566.018369] binder: BINDER_SET_CONTEXT_MGR already set
[  566.018424] binder: 8338:8341 ioctl 40046207 0 returned -16
[  566.039594] binder: 8328:8331 transaction failed 29189/-22, size 0-0 line 3138
[  566.069665] binder: undelivered TRANSACTION_ERROR: 29189
[  566.178166] binder: BINDER_SET_CONTEXT_MGR already set
[  566.178217] binder: 8346:8349 ioctl 40046207 0 returned -16
[  566.185598] binder_alloc: 25308: binder_alloc_buf, no vma
[  566.186408] binder: 8346:8349 transaction failed 29189/-3, size 0-0 line 3284
[  566.218147] binder_alloc: 7764: binder_alloc_buf, no vma
[  566.218442] binder: 8337:8342 transaction failed 29189/-3, size 0-0 line 3284
[  566.232464] binder: undelivered TRANSACTION_ERROR: 29189
[  566.246203] binder: undelivered TRANSACTION_ERROR: 29189
[  566.293036] binder: BINDER_SET_CONTEXT_MGR already set
[  566.293043] binder: 8364:8364 ioctl 40046207 0 returned -16
[  566.392200] binder: 8363:8365 transaction failed 29189/-22, size 0-0 line 3138
[  566.435828] binder: undelivered TRANSACTION_ERROR: 29189
[  566.542685] binder: BINDER_SET_CONTEXT_MGR already set
[  566.542738] binder: 8372:8374 ioctl 40046207 0 returned -16
[  566.544551] binder_alloc: 25308: binder_alloc_buf, no vma
[  566.544616] binder: 8372:8374 transaction failed 29189/-3, size 0-0 line 3284
[  566.586114] binder: undelivered TRANSACTION_ERROR: 29189
[  566.613954] binder: BINDER_SET_CONTEXT_MGR already set
[  566.614007] binder: 8370:8373 ioctl 40046207 0 returned -16
[  566.616699] binder_alloc: 7764: binder_alloc_buf, no vma
[  566.616767] binder: 8370:8373 transaction failed 29189/-3, size 0-0 line 3284
[  566.657057] binder: BINDER_SET_CONTEXT_MGR already set
[  566.657113] binder: 8385:8387 ioctl 40046207 0 returned -16
[  566.676077] binder: undelivered TRANSACTION_ERROR: 29189
[  566.854014] binder: BINDER_SET_CONTEXT_MGR already set
[  566.854022] binder: 8405:8405 ioctl 40046207 0 returned -16
[  566.854097] binder_alloc: 25308: binder_alloc_buf, no vma
[  566.854120] binder: 8405:8405 transaction failed 29189/-3, size 0-0 line 3284
[  566.858311] binder: 8391:8392 transaction failed 29189/-22, size 0-0 line 3138
[  566.887721] binder: undelivered TRANSACTION_ERROR: 29189
[  566.887765] binder: undelivered TRANSACTION_ERROR: 29189
[  566.931089] binder: BINDER_SET_CONTEXT_MGR already set
[  566.931096] binder: 8413:8413 ioctl 40046207 0 returned -16
[  567.060082] binder: BINDER_SET_CONTEXT_MGR already set
[  567.060090] binder: 8423:8423 ioctl 40046207 0 returned -16
[  567.190862] binder: BINDER_SET_CONTEXT_MGR already set
[  567.190870] binder: 8437:8437 ioctl 40046207 0 returned -16
[  567.190959] binder_alloc: 25308: binder_alloc_buf, no vma
[  567.190975] binder: 8437:8437 transaction failed 29189/-3, size 0-0 line 3284
[  567.325139] binder_alloc: 7764: binder_alloc_buf, no vma
[  567.325432] binder: 8426:8431 transaction failed 29189/-3, size 0-0 line 3284
[  567.327194] binder: 8428:8433 transaction failed 29189/-22, size 0-0 line 3138
[  567.331398] binder: BINDER_SET_CONTEXT_MGR already set
[  567.331450] binder: 8445:8446 ioctl 40046207 0 returned -16
[  567.355983] binder: undelivered TRANSACTION_ERROR: 29189
[  567.375821] binder: undelivered TRANSACTION_ERROR: 29189
[  567.440664] binder: BINDER_SET_CONTEXT_MGR already set
[  567.440682] binder: 8457:8457 ioctl 40046207 0 returned -16
[  567.441162] binder_alloc: 25308: binder_alloc_buf, no vma
[  567.441179] binder: 8457:8457 transaction failed 29189/-3, size 0-0 line 3284
[  567.519323] binder: BINDER_SET_CONTEXT_MGR already set
[  567.519332] binder: 8464:8464 ioctl 40046207 0 returned -16
[  567.700563] binder: 8467:8484 transaction failed 29189/-22, size 0-0 line 3138
[  567.702981] binder: BINDER_SET_CONTEXT_MGR already set
[  567.703032] binder: 8474:8476 ioctl 40046207 0 returned -16
[  567.703515] binder_alloc: 25308: binder_alloc_buf, no vma
[  567.703713] binder: 8474:8476 transaction failed 29189/-3, size 0-0 line 3284
[  567.735808] binder: undelivered TRANSACTION_ERROR: 29189
[  567.739947] binder: undelivered TRANSACTION_ERROR: 29189
[  567.763296] binder_alloc: 7764: binder_alloc_buf, no vma
[  567.763486] binder: 8469:8471 transaction failed 29189/-3, size 0-0 line 3284
[  567.801912] binder: BINDER_SET_CONTEXT_MGR already set
[  567.801965] binder: 8485:8486 ioctl 40046207 0 returned -16
[  567.810770] binder: undelivered TRANSACTION_ERROR: 29189
[  568.037674] binder: BINDER_SET_CONTEXT_MGR already set
[  568.037720] binder: 8495:8498 ioctl 40046207 0 returned -16
[  568.041662] binder_alloc: 25308: binder_alloc_buf, no vma
[  568.041936] binder: 8495:8498 transaction failed 29189/-3, size 0-0 line 3284
[  568.052938] binder: BINDER_SET_CONTEXT_MGR already set
[  568.052949] binder: 8509:8511 ioctl 40046207 0 returned -16
[  568.054802] binder: 8497:8502 transaction failed 29189/-22, size 0-0 line 3138
[  568.085985] binder: undelivered TRANSACTION_ERROR: 29189
[  568.103791] binder: undelivered TRANSACTION_ERROR: 29189
[  568.303322] binder: BINDER_SET_CONTEXT_MGR already set
[  568.303373] binder: 8525:8527 ioctl 40046207 0 returned -16
[  568.332735] binder: BINDER_SET_CONTEXT_MGR already set
[  568.332789] binder: 8526:8530 ioctl 40046207 0 returned -16
[  568.408152] binder: BINDER_SET_CONTEXT_MGR already set
[  568.408204] binder: 8528:8532 ioctl 40046207 0 returned -16
[  568.411483] binder_alloc: 25308: binder_alloc_buf, no vma
[  568.411754] binder: 8528:8532 transaction failed 29189/-3, size 0-0 line 3284
[  568.456601] binder: undelivered TRANSACTION_ERROR: 29189
[  568.548026] binder: 8531:8535 transaction failed 29189/-22, size 0-0 line 3138
[  568.586151] binder: undelivered TRANSACTION_ERROR: 29189
[  568.635558] binder: BINDER_SET_CONTEXT_MGR already set
[  568.635615] binder: 8550:8552 ioctl 40046207 0 returned -16
[  568.722085] binder: BINDER_SET_CONTEXT_MGR already set
[  568.722094] binder: 8553:8558 ioctl 40046207 0 returned -16
[  568.745768] binder_alloc: 25308: binder_alloc_buf, no vma
[  568.745842] binder: 8553:8558 transaction failed 29189/-3, size 0-0 line 3284
[  568.786440] binder: undelivered TRANSACTION_ERROR: 29189
[  568.876530] binder: BINDER_SET_CONTEXT_MGR already set
[  568.876576] binder: 8569:8571 ioctl 40046207 0 returned -16
[  568.887522] binder: BINDER_SET_CONTEXT_MGR already set
[  568.887567] binder: 8577:8578 ioctl 40046207 0 returned -16
[  568.947517] binder: 8568:8570 transaction failed 29189/-22, size 0-0 line 3138
[  568.985876] binder: undelivered TRANSACTION_ERROR: 29189
[  569.094573] binder: BINDER_SET_CONTEXT_MGR already set
[  569.094582] binder: 8593:8598 ioctl 40046207 0 returned -16
[  569.168221] binder: BINDER_SET_CONTEXT_MGR already set
[  569.168271] binder: 8584:8588 ioctl 40046207 0 returned -16
[  569.178066] binder_alloc: 25308: binder_alloc_buf, no vma
[  569.178092] binder: 8584:8588 transaction failed 29189/-3, size 0-0 line 3284
[  569.220347] binder: undelivered TRANSACTION_ERROR: 29189
[  569.283349] binder: BINDER_SET_CONTEXT_MGR already set
[  569.283357] binder: 8609:8612 ioctl 40046207 0 returned -16
[  569.331890] binder: 8602:8603 transaction failed 29189/-22, size 0-0 line 3138
[  569.366183] binder: undelivered TRANSACTION_ERROR: 29189
[  569.519712] binder: BINDER_SET_CONTEXT_MGR already set
[  569.519719] binder: 8627:8630 ioctl 40046207 0 returned -16
[  569.585224] binder: BINDER_SET_CONTEXT_MGR already set
[  569.585237] binder: 8621:8625 ioctl 40046207 0 returned -16
[  569.589606] binder_alloc: 25308: binder_alloc_buf, no vma
[  569.589635] binder: 8621:8625 transaction failed 29189/-3, size 0-0 line 3284
[  569.627362] binder: undelivered TRANSACTION_ERROR: 29189
[  569.766666] binder: 8634:8640 transaction failed 29189/-22, size 0-0 line 3138
[  569.789695] binder: BINDER_SET_CONTEXT_MGR already set
[  569.789702] binder: 8649:8650 ioctl 40046207 0 returned -16
[  569.799677] binder: undelivered TRANSACTION_ERROR: 29189
[  569.874237] binder: BINDER_SET_CONTEXT_MGR already set
[  569.874245] binder: 8655:8655 ioctl 40046207 0 returned -16
[  569.874334] binder_alloc: 25308: binder_alloc_buf, no vma
[  569.874351] binder: 8655:8655 transaction failed 29189/-3, size 0-0 line 3284
[  570.015681] binder: BINDER_SET_CONTEXT_MGR already set
[  570.015689] binder: 8671:8672 ioctl 40046207 0 returned -16
[  570.062312] binder: 8661:8663 transaction failed 29189/-22, size 0-0 line 3138
[  570.106021] binder: undelivered TRANSACTION_ERROR: 29189
[  570.203125] binder: BINDER_SET_CONTEXT_MGR already set
[  570.203133] binder: 8681:8683 ioctl 40046207 0 returned -16
[  570.354201] binder: BINDER_SET_CONTEXT_MGR already set
[  570.354209] binder: 8697:8701 ioctl 40046207 0 returned -16
[  570.464716] binder: 8690:8700 transaction failed 29189/-22, size 0-0 line 3138
[  570.516102] binder: undelivered TRANSACTION_ERROR: 29189
[  570.532042] binder: BINDER_SET_CONTEXT_MGR already set
[  570.532050] binder: 8708:8712 ioctl 40046207 0 returned -16
[  570.695236] binder: BINDER_SET_CONTEXT_MGR already set
[  570.695243] binder: 8723:8725 ioctl 40046207 0 returned -16
[  570.849879] binder: BINDER_SET_CONTEXT_MGR already set
[  570.849922] binder: 8732:8733 ioctl 40046207 0 returned -16
[  570.887857] binder: 8724:8726 transaction failed 29189/-22, size 0-0 line 3138
[  570.908438] binder: BINDER_SET_CONTEXT_MGR already set
[  570.908447] binder: 8737:8743 ioctl 40046207 0 returned -16
[  570.936277] binder: undelivered TRANSACTION_ERROR: 29189
[  571.090782] binder: BINDER_SET_CONTEXT_MGR already set
[  571.090791] binder: 8754:8754 ioctl 40046207 0 returned -16
[  571.108413] binder: BINDER_SET_CONTEXT_MGR already set
[  571.108421] binder: 8753:8755 ioctl 40046207 0 returned -16
[  571.277051] binder: BINDER_SET_CONTEXT_MGR already set
[  571.277062] binder: 8769:8771 ioctl 40046207 0 returned -16
[  571.324375] binder: BINDER_SET_CONTEXT_MGR already set
[  571.324382] binder: 8776:8776 ioctl 40046207 0 returned -16
[  571.346758] binder: 8756:8778 transaction failed 29189/-22, size 0-0 line 3138
[  571.386757] binder: undelivered TRANSACTION_ERROR: 29189
[  571.457852] binder_alloc: 25308: binder_alloc_buf, no vma
[  571.457915] binder: 8775:8777 transaction failed 29189/-3, size 0-0 line 3284
[  571.496690] binder: undelivered TRANSACTION_ERROR: 29189
[  571.517255] binder: BINDER_SET_CONTEXT_MGR already set
[  571.517263] binder: 8786:8788 ioctl 40046207 0 returned -16
[  571.592307] binder: BINDER_SET_CONTEXT_MGR already set
[  571.592349] binder: 8790:8794 ioctl 40046207 0 returned -16
[  571.718718] binder: BINDER_SET_CONTEXT_MGR already set
[  571.718727] binder: 8806:8808 ioctl 40046207 0 returned -16
[  571.838267] binder_alloc: 25308: binder_alloc_buf, no vma
[  571.838332] binder: 8804:8807 transaction failed 29189/-3, size 0-0 line 3284
[  571.859277] binder: BINDER_SET_CONTEXT_MGR already set
[  571.859285] binder: 8821:8821 ioctl 40046207 0 returned -16
[  571.868151] binder: BINDER_SET_CONTEXT_MGR already set
[  571.868214] binder: 8815:8818 ioctl 40046207 0 returned -16
[  571.886280] binder: undelivered TRANSACTION_ERROR: 29189
[  571.940655] binder: BINDER_SET_CONTEXT_MGR already set
[  571.940664] binder: 8823:8827 ioctl 40046207 0 returned -16
[  571.975088] binder: 8810:8813 transaction failed 29189/-22, size 0-0 line 3138
[  572.000990] binder: undelivered TRANSACTION_ERROR: 29189
[  572.152405] binder: BINDER_SET_CONTEXT_MGR already set
[  572.152458] binder: 8832:8837 ioctl 40046207 0 returned -16
[  572.154440] binder: BINDER_SET_CONTEXT_MGR already set
[  572.154448] binder: 8840:8843 ioctl 40046207 0 returned -16
[  572.192559] binder_alloc: 25308: binder_alloc_buf, no vma
[  572.192702] binder: 8834:8836 transaction failed 29189/-3, size 0-0 line 3284
[  572.228580] binder: undelivered TRANSACTION_ERROR: 29189
[  572.311217] binder: 8845:8849 transaction failed 29189/-22, size 0-0 line 3138
[  572.339788] binder: BINDER_SET_CONTEXT_MGR already set
[  572.339796] binder: 8856:8857 ioctl 40046207 0 returned -16
[  572.352656] binder: undelivered TRANSACTION_ERROR: 29189
[  572.507212] binder: BINDER_SET_CONTEXT_MGR already set
[  572.507224] binder: 8862:8868 ioctl 40046207 0 returned -16
[  572.522583] binder: BINDER_SET_CONTEXT_MGR already set
[  572.522644] binder: 8858:8860 ioctl 40046207 0 returned -16
[  572.568109] binder: BINDER_SET_CONTEXT_MGR already set
[  572.568118] binder: 8876:8879 ioctl 40046207 0 returned -16
[  572.586220] INFO: task init:27449 blocked for more than 140 seconds.
[  572.586225]       Not tainted 4.9.194+ #0
[  572.586227] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  572.586247] init            D28872 27449      1 0x00000000
[  572.586260]  0000000000000083 ffff8801ac84af80 ffff8801d2c9f900 ffff8801db621000
[  572.586270]  ffff8801ac848000 ffff8801db621018 ffff8801ad9675a0 ffffffff8281af8e
[  572.586279]  ffffffff810ae920 0000000000000000 0000000000000000 ffff8801db6218f0
[  572.586281] Call Trace:
[  572.586299]  [<000000003f005745>] ? __schedule+0x6ce/0x1f10
[  572.586308]  [<00000000bafc0fde>] ? __unwind_start+0x400/0x400
[  572.586317]  [<00000000a70cc1c3>] ? io_schedule_timeout+0x390/0x390
[  572.586323]  [<000000008b9907f1>] ? unwind_next_frame+0x32/0x50
[  572.586329]  [<000000004a91a820>] ? __down+0x159/0x2b0
[  572.586336]  [<000000002cb7e291>] schedule+0x92/0x1c0
[  572.586343]  [<00000000823e0168>] schedule_timeout+0x766/0xe50
[  572.586350]  [<000000006cf07288>] ? usleep_range+0x140/0x140
[  572.586359]  [<0000000014ec37a4>] ? check_preemption_disabled+0x3c/0x200
[  572.586368]  [<000000007ef710e9>] ? debug_lockdep_rcu_enabled+0x71/0xa0
[  572.586376]  [<00000000bdaaeec8>] ? mark_held_locks+0xb1/0x100
[  572.586383]  [<000000009782c4d0>] ? _raw_spin_unlock_irq+0x28/0x60
[  572.586389]  [<000000004a91a820>] ? __down+0x159/0x2b0
[  572.586396]  [<00000000f7849804>] ? trace_hardirqs_on_caller+0x385/0x5a0
[  572.586403]  [<000000004a91a820>] ? __down+0x159/0x2b0
[  572.586408]  [<000000008796b4f1>] __down+0x190/0x2b0
[  572.586415]  [<000000003150c7c9>] ? ww_mutex_unlock+0x300/0x300
[  572.586425]  [<00000000b89d677c>] down+0x64/0x90
[  572.586431]  [<000000001cb51a3b>] console_lock+0x2c/0x80
[  572.586439]  [<000000001e961b1e>] ? kmem_cache_alloc_trace+0x115/0x2d0
[  572.586445]  [<000000004297a6de>] console_device+0x1c/0xc0
[  572.586454]  [<00000000526170ba>] tty_open+0x796/0xe10
[  572.586462]  [<00000000ad85b9d3>] ? tty_init_dev+0x420/0x420
[  572.586469]  [<000000007d09bc8b>] ? chrdev_open+0xca/0x630
[  572.586477]  [<00000000ad85b9d3>] ? tty_init_dev+0x420/0x420
[  572.586484]  [<00000000890309a7>] chrdev_open+0x230/0x630
[  572.586491]  [<00000000eec37266>] ? cdev_put.part.0+0x50/0x50
[  572.586501]  [<00000000f343fec3>] do_dentry_open+0x422/0xd20
[  572.586508]  [<00000000eec37266>] ? cdev_put.part.0+0x50/0x50
[  572.586515]  [<0000000076cdfb0b>] vfs_open+0x105/0x230
[  572.586523]  [<00000000543af591>] ? may_open.isra.0+0x139/0x290
[  572.586529]  [<000000006e2f7a37>] path_openat+0xbf5/0x2f60
[  572.586537]  [<000000000a2dd2db>] ? path_mountpoint+0x6d0/0x6d0
[  572.586545]  [<00000000dba503c4>] do_filp_open+0x1a1/0x280
[  572.586552]  [<000000008de38bab>] ? may_open_dev+0xe0/0xe0
[  572.586561]  [<00000000dcca9b37>] ? __alloc_fd+0x1d4/0x490
[  572.586567]  [<000000002e42e292>] ? _raw_spin_unlock+0x2d/0x50
[  572.586574]  [<00000000dcca9b37>] ? __alloc_fd+0x1d4/0x490
[  572.586582]  [<00000000efbaf813>] do_sys_open+0x2f0/0x610
[  572.586588]  [<000000006c720c4c>] ? filp_open+0x70/0x70
[  572.586595]  [<00000000f7849804>] ? trace_hardirqs_on_caller+0x385/0x5a0
[  572.586602]  [<00000000dd7024d7>] SyS_open+0x2d/0x40
[  572.586608]  [<000000007727aea6>] ? do_sys_open+0x610/0x610
[  572.586615]  [<000000006eeeeb91>] do_syscall_64+0x1ad/0x5c0
[  572.586623]  [<0000000046654250>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
[  572.586626] 
[  572.586626] Showing all locks held in the system:
[  572.586633] 2 locks held by khungtaskd/24:
[  572.586650]  #0:  (rcu_read_lock){......}, at: [<00000000e41a2f33>] watchdog+0x14b/0xaf0
[  572.586665]  #1:  (tasklist_lock){.+.+..}, at: [<00000000b0644570>] debug_show_all_locks+0x7f/0x21f
[  572.586676] 1 lock held by rsyslogd/1896:
[  572.586688]  #0:  (&f->f_pos_lock){+.+.+.}, at: [<00000000411d7054>] __fdget_pos+0xa8/0xd0
[  572.586692] 2 locks held by getty/2023:
[  572.586704]  #0:  (&tty->ldisc_sem){++++++}, at: [<00000000f34f5ced>] ldsem_down_read+0x33/0x40
[  572.586716]  #1:  (&ldata->atomic_read_lock){+.+...}, at: [<000000004ece45c1>] n_tty_read+0x1fe/0x1820
[  572.586722] 1 lock held by syz-executor.5/2100:
[  572.586737]  #0:  (&xt[i].mutex){+.+.+.}, at: [<000000002541e17f>] xt_find_table_lock+0x3c/0x3d0
[  572.586741] 1 lock held by syz-executor.0/2109:
[  572.586753]  #0:  (&xt[i].mutex){+.+.+.}, at: [<000000002541e17f>] xt_find_table_lock+0x3c/0x3d0
[  572.586811] 1 lock held by init/27449:
[  572.586821]  #0:  (tty_mutex){+.+.+.}, at: [<000000002f2435da>] tty_open+0x3f9/0xe10
[  572.586824] 1 lock held by init/27450:
[  572.586832]  #0:  (tty_mutex){+.+.+.}, at: [<000000002f2435da>] tty_open+0x3f9/0xe10
[  572.586835] 1 lock held by init/27455:
[  572.586844]  #0:  (tty_mutex){+.+.+.}, at: [<000000002f2435da>] tty_open+0x3f9/0xe10
[  572.586847] 1 lock held by init/27456:
[  572.586855]  #0:  (tty_mutex){+.+.+.}, at: [<000000002f2435da>] tty_open+0x3f9/0xe10
[  572.586858] 1 lock held by init/27457:
[  572.586866]  #0:  (tty_mutex){+.+.+.}, at: [<000000002f2435da>] tty_open+0x3f9/0xe10
[  572.586869] 1 lock held by init/27458:
[  572.586877]  #0:  (tty_mutex){+.+.+.}, at: [<000000002f2435da>] tty_open+0x3f9/0xe10
[  572.587067] 
[  572.587069] =============================================
[  572.587069] 
[  572.587072] NMI backtrace for cpu 1
[  572.587079] CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.194+ #0
[  572.587088]  ffff8801d98d7cc8 ffffffff81b67001 0000000000000001 0000000000000000
[  572.587096]  0000000000000001 ffffffff81099d01 dffffc0000000000 ffff8801d98d7d00
[  572.587104]  ffffffff81b7229c 0000000000000001 0000000000000000 0000000000000001
[  572.587106] Call Trace:
[  572.587115]  [<0000000059dcd61f>] dump_stack+0xc1/0x120
[  572.587124]  [<000000005f9404fd>] ? irq_force_complete_move+0x271/0x300
[  572.587132]  [<000000005a68b836>] nmi_cpu_backtrace.cold+0x47/0x87
[  572.587140]  [<00000000bf92a948>] ? irq_force_complete_move+0x300/0x300
[  572.587148]  [<000000003388c87f>] nmi_trigger_cpumask_backtrace+0x124/0x155
[  572.587155]  [<00000000457fda41>] arch_trigger_cpumask_backtrace+0x14/0x20
[  572.587162]  [<0000000017e2f2cf>] watchdog+0x670/0xaf0
[  572.587167]  [<00000000e41a2f33>] ? watchdog+0x14b/0xaf0
[  572.587174]  [<00000000f7849804>] ? trace_hardirqs_on_caller+0x385/0x5a0
[  572.587181]  [<000000006ce796fe>] ? hungtask_pm_notify+0x60/0x60
[  572.587189]  [<00000000fbc2f19e>] kthread+0x278/0x310
[  572.587195]  [<000000008270a3e2>] ? kthread_park+0xa0/0xa0
[  572.587202]  [<000000007ef710e9>] ? debug_lockdep_rcu_enabled+0x71/0xa0
[  572.587210]  [<0000000070373522>] ? _raw_spin_unlock_irq+0x39/0x60
[  572.587216]  [<00000000b9044ba3>] ? finish_task_switch+0x1e5/0x660
[  572.587222]  [<000000008135202a>] ? finish_task_switch+0x1b7/0x660
[  572.587227]  [<000000009bf35e37>] ? __switch_to_asm+0x41/0x70
[  572.587233]  [<000000009ea0ef92>] ? __switch_to_asm+0x35/0x70
[  572.587239]  [<000000009bf35e37>] ? __switch_to_asm+0x41/0x70
[  572.587245]  [<000000008270a3e2>] ? kthread_park+0xa0/0xa0
[  572.587251]  [<000000008270a3e2>] ? kthread_park+0xa0/0xa0
[  572.587256]  [<00000000ce700d5e>] ret_from_fork+0x5c/0x70
[  572.587262] Sending NMI from CPU 1 to CPUs 0:
[  572.587540] NMI backtrace for cpu 0
[  572.587543] CPU: 0 PID: 24552 Comm: kworker/u4:2 Not tainted 4.9.194+ #0
[  572.587545] task: 000000005ace9c0c task.stack: 000000000ca2742d
[  572.587548] RIP: 0010:[<ffffffff811381d1>] 
c [<0000000065e0844a>] wq_worker_sleeping+0x1/0x210
[  572.587550] RSP: 0018:ffff8801d6597bf8  EFLAGS: 00000002
[  572.587553] RAX: 0000000000000007 RBX: 0000000000000001 RCX: 1ffffffff067e07c
[  572.587556] RDX: 0000000000000000 RSI: ffff8801a10adf80 RDI: ffff8801a10adf00
[  572.587558] RBP: ffff8801d6597cd8 R08: ffff8801a10adfa8 R09: 0000000000000000
[  572.587561] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000021000
[  572.587563] R13: ffff8801db621000 R14: ffff8801a10adf5c R15: ffff8801a10adf00
[  572.587566] FS:  0000000000000000(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000
[  572.587568] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  572.587571] CR2: 0000000000000130 CR3: 00000001c9631000 CR4: 00000000001606b0
[  572.587573] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  572.587576] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  572.587577] Stack:
[  572.587580]  ffff8801d6597cd8
c ffffffff8281b631
c ffff8801c736f810
c ffff8801a10adf00
c
[  572.587582]  00ff8801d6597c28
c ffff8801db6218f0
c 1ffff1003acb2f8a
c ffff8801db621918
c
[  572.587585]  ffff8801db621018
c ffff8801a10ae578
c ffff8801db621000
c 0000000041b58ab3
c
[  572.587587] Call Trace:
[  572.587589]  [<0000000036745fae>] ? __schedule+0xd71/0x1f10
[  572.587591]  [<00000000a70cc1c3>] ? io_schedule_timeout+0x390/0x390
[  572.587593]  [<000000009782c4d0>] ? _raw_spin_unlock_irq+0x28/0x60
[  572.587595]  [<000000002cb7e291>] schedule+0x92/0x1c0
[  572.587598]  [<000000007da0a07a>] worker_thread+0x15e/0x11d0
[  572.587600]  [<000000002bff0002>] ? process_one_work+0x1600/0x1600
[  572.587602]  [<00000000fbc2f19e>] kthread+0x278/0x310
[  572.587604]  [<000000009c171f60>] ? __this_cpu_preempt_check+0x1d/0x30
[  572.587607]  [<000000008270a3e2>] ? kthread_park+0xa0/0xa0
[  572.587609]  [<000000007ef710e9>] ? debug_lockdep_rcu_enabled+0x71/0xa0
[  572.587611]  [<0000000070373522>] ? _raw_spin_unlock_irq+0x39/0x60
[  572.587614]  [<00000000b9044ba3>] ? finish_task_switch+0x1e5/0x660
[  572.587616]  [<000000008135202a>] ? finish_task_switch+0x1b7/0x660
[  572.587618]  [<000000009bf35e37>] ? __switch_to_asm+0x41/0x70
[  572.587621]  [<000000009ea0ef92>] ? __switch_to_asm+0x35/0x70
[  572.587623]  [<000000009bf35e37>] ? __switch_to_asm+0x41/0x70
[  572.587625]  [<000000008270a3e2>] ? kthread_park+0xa0/0xa0
[  572.587627]  [<000000008270a3e2>] ? kthread_park+0xa0/0xa0
[  572.587630]  [<00000000ce700d5e>] ret_from_fork+0x5c/0x70
[  572.587638] Code: 
ce6 
c66 
c3c 
c00 
ce9 
c54 
cff 
cff 
cff 
ce8 
cbc 
c66 
c3c 
c00 
ce9 
c74 
cff 
cff 
cff 
c4c 
c89 
cf7 
ce8 
ccf 
c66 
c3c 
c00 
ceb 
ccf 
c0f 
c1f 
c00 
c66 
c2e 
c0f 
c1f 
c84 
c00 
c00 
c00 
c00 
c00 
c55 
c<48> 
c89 
ce5 
c41 
c54 
c49 
c89 
cfc 
c53 
ce8 
c21 
ca5 
c1e 
c00 
c4c 
c89 
ce7 
ce8 
ce9 
c09 
c01 
c
[  572.588278] Kernel panic - not syncing: hung_task: blocked tasks
[  572.588285] CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.194+ #0
[  572.588296]  ffff8801d98d7c60 ffffffff81b67001 ffff8801ac84af00 ffffffff82a7b6c0
[  572.588304]  00000000ffffffff 0000000000000001 dffffc0000000000 ffff8801d98d7d40
[  572.588313]  ffffffff813fef3a 0000000041b58ab3 ffffffff82e32f55 ffffffff813fed61
[  572.588315] Call Trace:
[  572.588324]  [<0000000059dcd61f>] dump_stack+0xc1/0x120
[  572.588332]  [<00000000de5e83f3>] panic+0x1d9/0x3bd
[  572.588339]  [<0000000085879d27>] ? add_taint.cold+0x16/0x16
[  572.588346]  [<0000000056f3ec2c>] ? find_next_bit+0x44/0x50
[  572.588353]  [<00000000f5700b39>] ? printk_nmi_flush+0xae/0xd0
[  572.588362]  [<00000000bf92a948>] ? irq_force_complete_move+0x300/0x300
[  572.588370]  [<00000000b62cc616>] ? nmi_trigger_cpumask_backtrace+0xfc/0x155
[  572.588378]  [<00000000884d7d48>] watchdog+0x681/0xaf0
[  572.588385]  [<00000000e41a2f33>] ? watchdog+0x14b/0xaf0
[  572.588392]  [<00000000f7849804>] ? trace_hardirqs_on_caller+0x385/0x5a0
[  572.588400]  [<000000006ce796fe>] ? hungtask_pm_notify+0x60/0x60
[  572.588407]  [<00000000fbc2f19e>] kthread+0x278/0x310
[  572.588414]  [<000000008270a3e2>] ? kthread_park+0xa0/0xa0
[  572.588421]  [<000000007ef710e9>] ? debug_lockdep_rcu_enabled+0x71/0xa0
[  572.588429]  [<0000000070373522>] ? _raw_spin_unlock_irq+0x39/0x60
[  572.588435]  [<00000000b9044ba3>] ? finish_task_switch+0x1e5/0x660
[  572.588442]  [<000000008135202a>] ? finish_task_switch+0x1b7/0x660
[  572.588448]  [<000000009bf35e37>] ? __switch_to_asm+0x41/0x70
[  572.588455]  [<000000009ea0ef92>] ? __switch_to_asm+0x35/0x70
[  572.588460]  [<000000009bf35e37>] ? __switch_to_asm+0x41/0x70
[  572.588467]  [<000000008270a3e2>] ? kthread_park+0xa0/0xa0
[  572.588474]  [<000000008270a3e2>] ? kthread_park+0xa0/0xa0
[  572.588481]  [<00000000ce700d5e>] ret_from_fork+0x5c/0x70
[  572.589259] Kernel Offset: disabled