)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:16 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:16 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1390.056630] binder: 17219:17333 ioctl 40046207 0 returned -16
[ 1390.056775] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1390.056800] binder: 17219:17333 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1390.194104] binder: BINDER_SET_CONTEXT_MGR already set
15:38:16 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:16 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1390.194114] binder: 17397:17404 ioctl 40046207 0 returned -16
[ 1390.194231] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:16 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:16 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1390.194254] binder: 17397:17404 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1390.261634] binder: BINDER_SET_CONTEXT_MGR already set
15:38:16 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:16 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1390.261644] binder: 17544:17560 ioctl 40046207 0 returned -16
[ 1390.261888] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:16 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:16 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:16 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:16 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1390.261912] binder: 17544:17560 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1390.375840] binder: BINDER_SET_CONTEXT_MGR already set
[ 1390.375850] binder: 17587:17599 ioctl 40046207 0 returned -16
15:38:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:16 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1390.376022] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1390.376055] binder: 17587:17599 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:16 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:16 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:16 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:16 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1390.491795] binder: BINDER_SET_CONTEXT_MGR already set
15:38:16 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1390.491805] binder: 17659:17687 ioctl 40046207 0 returned -16
15:38:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:16 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1390.521920] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1390.521949] binder: 17659:17687 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:16 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:17 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:17 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1390.649389] binder: BINDER_SET_CONTEXT_MGR already set
[ 1390.649398] binder: 17766:17782 ioctl 40046207 0 returned -16
15:38:17 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1390.649543] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1390.649565] binder: 17766:17782 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:17 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:17 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:17 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1390.684071] binder: BINDER_SET_CONTEXT_MGR already set
[ 1390.684081] binder: 17799:17804 ioctl 40046207 0 returned -16
[ 1390.701293] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:17 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:17 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:17 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1390.701322] binder: 17799:17804 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1390.745613] binder: BINDER_SET_CONTEXT_MGR already set
15:38:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:17 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:17 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1390.745622] binder: 17825:17868 ioctl 40046207 0 returned -16
[ 1390.745746] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:17 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:17 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:17 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1390.745768] binder: 17825:17868 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1390.902625] binder: BINDER_SET_CONTEXT_MGR already set
[ 1390.902635] binder: 17964:18010 ioctl 40046207 0 returned -16
[ 1390.902779] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:17 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:17 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1390.902802] binder: 17964:18010 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:17 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1390.984612] binder: BINDER_SET_CONTEXT_MGR already set
15:38:17 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:17 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:17 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:17 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1390.984622] binder: 18052:18102 ioctl 40046207 0 returned -16
[ 1390.985689] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1390.985711] binder: 18052:18102 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1391.100878] binder: BINDER_SET_CONTEXT_MGR already set
[ 1391.100888] binder: 18151:18158 ioctl 40046207 0 returned -16
15:38:17 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:17 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1391.101006] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1391.101029] binder: 18151:18158 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1391.183194] binder: BINDER_SET_CONTEXT_MGR already set
[ 1391.183204] binder: 18193:18215 ioctl 40046207 0 returned -16
[ 1391.183338] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1391.183361] binder: 18193:18215 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:17 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1391.359448] binder: BINDER_SET_CONTEXT_MGR already set
[ 1391.359458] binder: 18271:18315 ioctl 40046207 0 returned -16
15:38:17 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:17 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1391.359635] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1391.359658] binder: 18271:18315 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:17 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:17 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:17 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1391.556973] binder: BINDER_SET_CONTEXT_MGR already set
[ 1391.556983] binder: 18441:18468 ioctl 40046207 0 returned -16
[ 1391.557176] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1391.557327] binder: 18441:18468 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:17 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:17 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1391.619993] binder: BINDER_SET_CONTEXT_MGR already set
15:38:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1391.620003] binder: 18490:18500 ioctl 40046207 0 returned -16
15:38:18 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:18 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:18 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1391.620113] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1391.620135] binder: 18490:18500 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1391.704778] binder: BINDER_SET_CONTEXT_MGR already set
[ 1391.704789] binder: 18547:18564 ioctl 40046207 0 returned -16
[ 1391.704910] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:18 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:18 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1391.704935] binder: 18547:18564 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1391.883419] binder: BINDER_SET_CONTEXT_MGR already set
[ 1391.883429] binder: 18617:18723 ioctl 40046207 0 returned -16
[ 1391.883536] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:18 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1391.883571] binder: 18617:18723 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:18 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:18 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:18 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:18 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1392.002996] binder: BINDER_SET_CONTEXT_MGR already set
[ 1392.003007] binder: 18750:18767 ioctl 40046207 0 returned -16
[ 1392.003131] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:18 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1392.003153] binder: 18750:18767 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:18 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1392.076807] binder: BINDER_SET_CONTEXT_MGR already set
[ 1392.076817] binder: 18811:18827 ioctl 40046207 0 returned -16
[ 1392.076955] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1392.076979] binder: 18811:18827 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:18 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:18 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:18 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:18 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:18 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:18 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1392.109914] binder: BINDER_SET_CONTEXT_MGR already set
[ 1392.109924] binder: 18854:18857 ioctl 40046207 0 returned -16
15:38:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:18 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:18 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1392.110036] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1392.110057] binder: 18854:18857 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1392.212996] binder: BINDER_SET_CONTEXT_MGR already set
[ 1392.213006] binder: 18950:18957 ioctl 40046207 0 returned -16
[ 1392.213116] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:18 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:18 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1392.213273] binder: 18950:18957 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1392.314823] binder: BINDER_SET_CONTEXT_MGR already set
[ 1392.314834] binder: 18992:19067 ioctl 40046207 0 returned -16
[ 1392.314983] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1392.316254] binder: 18992:19067 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1392.473145] binder: BINDER_SET_CONTEXT_MGR already set
[ 1392.473155] binder: 19084:19149 ioctl 40046207 0 returned -16
[ 1392.473286] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1392.473308] binder: 19084:19149 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1392.588285] binder: BINDER_SET_CONTEXT_MGR already set
[ 1392.588295] binder: 19278:19305 ioctl 40046207 0 returned -16
[ 1392.588413] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1392.588437] binder: 19278:19305 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1392.624653] binder: BINDER_SET_CONTEXT_MGR already set
[ 1392.624663] binder: 19317:19324 ioctl 40046207 0 returned -16
[ 1392.624778] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1392.624801] binder: 19317:19324 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:18 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1392.697460] binder: BINDER_SET_CONTEXT_MGR already set
[ 1392.697470] binder: 19357:19380 ioctl 40046207 0 returned -16
15:38:18 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:18 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:18 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1392.697592] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1392.697617] binder: 19357:19380 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1392.998925] binder: BINDER_SET_CONTEXT_MGR already set
[ 1392.998935] binder: 19448:19505 ioctl 40046207 0 returned -16
15:38:18 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:19 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1392.999073] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1392.999097] binder: 19448:19505 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:19 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1393.080830] binder: BINDER_SET_CONTEXT_MGR already set
15:38:19 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:19 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1393.080842] binder: 19547:19578 ioctl 40046207 0 returned -16
[ 1393.080961] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:19 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1393.080985] binder: 19547:19578 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1393.174068] binder: BINDER_SET_CONTEXT_MGR already set
[ 1393.174078] binder: 19609:19625 ioctl 40046207 0 returned -16
[ 1393.174218] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1393.174242] binder: 19609:19625 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:19 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:19 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:19 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1393.235141] binder: BINDER_SET_CONTEXT_MGR already set
15:38:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:19 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:19 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1393.235151] binder: 19645:19646 ioctl 40046207 0 returned -16
[ 1393.235279] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1393.235302] binder: 19645:19646 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1393.305642] binder: BINDER_SET_CONTEXT_MGR already set
15:38:19 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:19 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1393.305652] binder: 19693:19740 ioctl 40046207 0 returned -16
[ 1393.305762] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:19 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1393.305786] binder: 19693:19740 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:19 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1393.500971] binder: BINDER_SET_CONTEXT_MGR already set
15:38:19 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:19 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:19 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1393.500980] binder: 19825:19833 ioctl 40046207 0 returned -16
[ 1393.501121] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1393.501144] binder: 19825:19833 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:19 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1393.552846] binder: BINDER_SET_CONTEXT_MGR already set
15:38:19 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1393.552856] binder: 19860:19872 ioctl 40046207 0 returned -16
[ 1393.552980] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:19 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:19 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:19 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1393.553005] binder: 19860:19872 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:19 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1393.613590] binder: BINDER_SET_CONTEXT_MGR already set
[ 1393.613602] binder: 19896:19938 ioctl 40046207 0 returned -16
15:38:19 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1393.613761] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1393.613784] binder: 19896:19938 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:19 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1393.699150] binder: BINDER_SET_CONTEXT_MGR already set
15:38:19 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:19 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:19 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:20 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1393.699162] binder: 19971:20019 ioctl 40046207 0 returned -16
[ 1393.699280] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1393.699304] binder: 19971:20019 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:20 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1393.770745] binder: BINDER_SET_CONTEXT_MGR already set
[ 1393.770755] binder: 20050:20095 ioctl 40046207 0 returned -16
[ 1393.770968] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:20 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:20 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:20 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1393.770991] binder: 20050:20095 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:20 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:20 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:20 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1393.908716] binder: BINDER_SET_CONTEXT_MGR already set
[ 1393.908731] binder: 20125:20160 ioctl 40046207 0 returned -16
[ 1393.908886] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1393.908909] binder: 20125:20160 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:20 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:20 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:20 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:20 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1394.079005] binder: BINDER_SET_CONTEXT_MGR already set
[ 1394.079015] binder: 20268:20288 ioctl 40046207 0 returned -16
[ 1394.079317] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:20 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1394.079341] binder: 20268:20288 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:20 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:20 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1394.139071] binder: BINDER_SET_CONTEXT_MGR already set
15:38:20 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:20 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1394.139083] binder: 20327:20370 ioctl 40046207 0 returned -16
[ 1394.139211] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:20 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1394.139241] binder: 20327:20370 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1394.396326] binder: BINDER_SET_CONTEXT_MGR already set
15:38:20 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1394.396335] binder: 20494:20537 ioctl 40046207 0 returned -16
[ 1394.396468] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:20 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:20 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1394.396492] binder: 20494:20537 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:20 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1394.454256] binder: BINDER_SET_CONTEXT_MGR already set
15:38:20 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:20 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:20 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1394.454266] binder: 20574:20591 ioctl 40046207 0 returned -16
[ 1394.454379] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:20 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:20 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1394.454402] binder: 20574:20591 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1394.513531] binder: BINDER_SET_CONTEXT_MGR already set
15:38:20 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:20 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1394.513542] binder: 20604:20618 ioctl 40046207 0 returned -16
15:38:21 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1394.513681] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1394.513706] binder: 20604:20618 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:21 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:21 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:21 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:21 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:21 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1394.568396] binder: BINDER_SET_CONTEXT_MGR already set
[ 1394.568409] binder: 20693:20702 ioctl 40046207 0 returned -16
[ 1394.568542] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1394.568566] binder: 20693:20702 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:21 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:21 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1394.639590] binder: BINDER_SET_CONTEXT_MGR already set
[ 1394.639601] binder: 20733:20735 ioctl 40046207 0 returned -16
[ 1394.639736] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:21 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:21 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:21 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:21 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1394.639759] binder: 20733:20735 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1394.722682] binder: BINDER_SET_CONTEXT_MGR already set
[ 1394.722691] binder: 20800:20806 ioctl 40046207 0 returned -16
[ 1394.722802] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1394.722825] binder: 20800:20806 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:21 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1394.941283] binder: BINDER_SET_CONTEXT_MGR already set
[ 1394.941293] binder: 20865:20917 ioctl 40046207 0 returned -16
15:38:21 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:21 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:21 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:21 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1394.941409] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1394.941433] binder: 20865:20917 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1395.227562] binder: BINDER_SET_CONTEXT_MGR already set
[ 1395.227572] binder: 21082:21202 ioctl 40046207 0 returned -16
[ 1395.227700] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:21 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1395.227723] binder: 21082:21202 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:21 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1395.278872] binder: BINDER_SET_CONTEXT_MGR already set
[ 1395.278884] binder: 21225:21226 ioctl 40046207 0 returned -16
15:38:21 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:21 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:21 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:21 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:21 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:21 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1395.278994] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1395.279016] binder: 21225:21226 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:21 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1395.335907] binder: BINDER_SET_CONTEXT_MGR already set
15:38:21 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:21 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:21 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1395.335918] binder: 21260:21278 ioctl 40046207 0 returned -16
[ 1395.336035] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:21 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:21 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:21 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1395.336058] binder: 21260:21278 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:21 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:22 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:22 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1395.532055] binder: BINDER_SET_CONTEXT_MGR already set
[ 1395.532065] binder: 21423:21457 ioctl 40046207 0 returned -16
15:38:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:22 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:22 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:22 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1395.532187] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1395.532209] binder: 21423:21457 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:22 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:22 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:22 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1395.575467] binder: BINDER_SET_CONTEXT_MGR already set
[ 1395.575477] binder: 21488:21524 ioctl 40046207 0 returned -16
[ 1395.575611] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:22 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:22 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1395.575636] binder: 21488:21524 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1395.770135] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:22 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1395.770161] binder: 21572:21603 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1396.026599] binder: BINDER_SET_CONTEXT_MGR already set
15:38:22 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:22 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:22 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:22 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1396.026610] binder: 21836:21867 ioctl 40046207 0 returned -16
[ 1396.026744] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1396.026768] binder: 21836:21867 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:22 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:22 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1396.262331] binder: BINDER_SET_CONTEXT_MGR already set
[ 1396.262342] binder: 21963:22011 ioctl 40046207 0 returned -16
15:38:22 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:22 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:22 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1396.262479] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1396.262501] binder: 21963:22011 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:22 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1396.294464] binder: BINDER_SET_CONTEXT_MGR already set
15:38:22 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:22 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:22 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:22 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1396.294475] binder: 22068:22082 ioctl 40046207 0 returned -16
[ 1396.294602] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1396.294625] binder: 22068:22082 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:22 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:22 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1396.455108] binder: BINDER_SET_CONTEXT_MGR already set
15:38:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:22 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1396.455120] binder: 22122:22205 ioctl 40046207 0 returned -16
[ 1396.455288] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:22 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:22 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:22 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1396.455313] binder: 22122:22205 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1396.639366] binder: BINDER_SET_CONTEXT_MGR already set
15:38:23 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:23 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1396.639376] binder: 22313:22320 ioctl 40046207 0 returned -16
[ 1396.639506] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1396.639529] binder: 22313:22320 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:23 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1396.751808] binder: BINDER_SET_CONTEXT_MGR already set
15:38:23 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:23 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1396.751818] binder: 22352:22380 ioctl 40046207 0 returned -16
[ 1396.751959] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:23 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:23 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1396.751982] binder: 22352:22380 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:23 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:23 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1396.853236] binder: BINDER_SET_CONTEXT_MGR already set
15:38:23 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1396.853245] binder: 22445:22526 ioctl 40046207 0 returned -16
15:38:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:23 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1396.853349] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1396.853372] binder: 22445:22526 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:23 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:23 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:23 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:23 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1397.037092] binder: BINDER_SET_CONTEXT_MGR already set
[ 1397.037103] binder: 22617:22664 ioctl 40046207 0 returned -16
[ 1397.039202] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1397.039227] binder: 22617:22664 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1397.222779] binder: BINDER_SET_CONTEXT_MGR already set
[ 1397.222792] binder: 22716:22742 ioctl 40046207 0 returned -16
15:38:23 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:23 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:23 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1397.222941] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1397.222964] binder: 22716:22742 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:23 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:23 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1397.400232] binder: BINDER_SET_CONTEXT_MGR already set
15:38:23 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:23 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1397.400243] binder: 22913:22950 ioctl 40046207 0 returned -16
[ 1397.400382] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1397.400404] binder: 22913:22950 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1397.578205] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1397.578230] binder: 23083:23093 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:23 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:23 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:23 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:23 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1397.726445] binder: BINDER_SET_CONTEXT_MGR already set
[ 1397.726454] binder: 23216:23235 ioctl 40046207 0 returned -16
[ 1397.726631] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1397.726655] binder: 23216:23235 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1397.829714] binder: BINDER_SET_CONTEXT_MGR already set
[ 1397.829724] binder: 23258:23269 ioctl 40046207 0 returned -16
15:38:24 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:24 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1397.829934] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1397.830005] binder: 23258:23269 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:24 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:24 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1397.853722] binder: BINDER_SET_CONTEXT_MGR already set
15:38:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:24 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1397.853732] binder: 23317:23322 ioctl 40046207 0 returned -16
[ 1397.853864] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:24 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:24 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1397.853887] binder: 23317:23322 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1397.987916] binder: BINDER_SET_CONTEXT_MGR already set
15:38:24 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1397.987928] binder: 23352:23372 ioctl 40046207 0 returned -16
[ 1397.988059] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:24 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1397.988082] binder: 23352:23372 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1398.037045] binder: BINDER_SET_CONTEXT_MGR already set
[ 1398.037056] binder: 23396:23427 ioctl 40046207 0 returned -16
15:38:24 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:24 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:24 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1398.037173] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1398.037198] binder: 23396:23427 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:24 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:24 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1398.108530] binder: BINDER_SET_CONTEXT_MGR already set
[ 1398.108540] binder: 23477:23482 ioctl 40046207 0 returned -16
15:38:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:24 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1398.108681] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1398.108704] binder: 23477:23482 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:24 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1398.234068] binder: BINDER_SET_CONTEXT_MGR already set
15:38:24 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:24 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:24 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:24 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1398.234077] binder: 23508:23553 ioctl 40046207 0 returned -16
[ 1398.234191] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:24 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:24 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1398.234214] binder: 23508:23553 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1398.291449] binder: BINDER_SET_CONTEXT_MGR already set
15:38:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:24 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:24 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:24 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:24 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1398.291459] binder: 23600:23613 ioctl 40046207 0 returned -16
[ 1398.291581] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1398.291604] binder: 23600:23613 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1398.362824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1398.362833] binder: 23649:23653 ioctl 40046207 0 returned -16
15:38:24 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1398.362947] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1398.362970] binder: 23649:23653 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1398.465772] binder: BINDER_SET_CONTEXT_MGR already set
[ 1398.465781] binder: 23709:23730 ioctl 40046207 0 returned -16
[ 1398.465912] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1398.465937] binder: 23709:23730 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1398.547205] binder: BINDER_SET_CONTEXT_MGR already set
15:38:24 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:24 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1398.547216] binder: 23754:23768 ioctl 40046207 0 returned -16
15:38:24 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:24 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:25 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:25 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1398.547345] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1398.547368] binder: 23754:23768 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:25 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1398.667293] binder: BINDER_SET_CONTEXT_MGR already set
[ 1398.667304] binder: 23773:23850 ioctl 40046207 0 returned -16
15:38:25 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:25 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:25 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1398.669670] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1398.669694] binder: 23773:23850 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1398.781348] binder: BINDER_SET_CONTEXT_MGR already set
15:38:25 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:25 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1398.781359] binder: 23881:23896 ioctl 40046207 0 returned -16
[ 1398.781501] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:25 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:25 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1398.781526] binder: 23881:23896 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:25 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1398.865635] binder: BINDER_SET_CONTEXT_MGR already set
15:38:25 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:25 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:25 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:25 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1398.865645] binder: 23972:23988 ioctl 40046207 0 returned -16
[ 1398.865761] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:25 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:25 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1398.865784] binder: 23972:23988 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1399.011123] binder: BINDER_SET_CONTEXT_MGR already set
15:38:25 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:25 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1399.011133] binder: 24020:24124 ioctl 40046207 0 returned -16
[ 1399.011884] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1399.011907] binder: 24020:24124 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:25 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:25 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:25 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:25 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1399.255997] binder: BINDER_SET_CONTEXT_MGR already set
[ 1399.256007] binder: 24267:24292 ioctl 40046207 0 returned -16
[ 1399.256140] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1399.256164] binder: 24267:24292 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:25 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1399.326928] binder: BINDER_SET_CONTEXT_MGR already set
[ 1399.326937] binder: 24367:24395 ioctl 40046207 0 returned -16
[ 1399.327113] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:25 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:25 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:25 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:25 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1399.327136] binder: 24367:24395 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1399.416923] binder: BINDER_SET_CONTEXT_MGR already set
[ 1399.416934] binder: 24452:24495 ioctl 40046207 0 returned -16
15:38:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:26 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1399.417119] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1399.417144] binder: 24452:24495 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:26 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:26 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:26 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1399.522270] binder: BINDER_SET_CONTEXT_MGR already set
15:38:26 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:26 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:26 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1399.522281] binder: 24572:24591 ioctl 40046207 0 returned -16
[ 1399.522393] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1399.522417] binder: 24572:24591 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1399.633895] binder: BINDER_SET_CONTEXT_MGR already set
15:38:26 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:26 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1399.633906] binder: 24604:24668 ioctl 40046207 0 returned -16
[ 1399.634027] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:26 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1399.634059] binder: 24604:24668 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:26 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:26 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:26 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1399.772547] binder: BINDER_SET_CONTEXT_MGR already set
[ 1399.772557] binder: 24711:24769 ioctl 40046207 0 returned -16
[ 1399.772677] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1399.772699] binder: 24711:24769 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1399.828872] binder: BINDER_SET_CONTEXT_MGR already set
[ 1399.828882] binder: 24810:24848 ioctl 40046207 0 returned -16
15:38:26 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1399.828993] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1399.829016] binder: 24810:24848 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:26 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1399.902131] binder: BINDER_SET_CONTEXT_MGR already set
[ 1399.902141] binder: 24854:24859 ioctl 40046207 0 returned -16
15:38:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:26 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:26 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:26 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:26 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1399.902292] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1399.902315] binder: 24854:24859 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1399.939508] binder: BINDER_SET_CONTEXT_MGR already set
[ 1399.939518] binder: 24868:24874 ioctl 40046207 0 returned -16
[ 1399.939665] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1399.939687] binder: 24868:24874 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:26 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:26 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:26 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1400.012941] binder: BINDER_SET_CONTEXT_MGR already set
[ 1400.012952] binder: 24939:24959 ioctl 40046207 0 returned -16
15:38:26 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:26 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1400.013165] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1400.013224] binder: 24939:24959 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:26 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1400.059831] binder: BINDER_SET_CONTEXT_MGR already set
[ 1400.059842] binder: 24990:25011 ioctl 40046207 0 returned -16
[ 1400.059980] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:26 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:26 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1400.060005] binder: 24990:25011 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:27 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:27 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:27 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1400.116241] binder: BINDER_SET_CONTEXT_MGR already set
15:38:27 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:27 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1400.116251] binder: 25038:25047 ioctl 40046207 0 returned -16
[ 1400.116367] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1400.116393] binder: 25038:25047 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:27 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:27 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1400.380674] binder: BINDER_SET_CONTEXT_MGR already set
[ 1400.380683] binder: 25199:25254 ioctl 40046207 0 returned -16
[ 1400.380806] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1400.380829] binder: 25199:25254 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1400.530839] binder: BINDER_SET_CONTEXT_MGR already set
15:38:27 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:27 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:27 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:27 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:27 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1400.530849] binder: 25332:25343 ioctl 40046207 0 returned -16
[ 1400.530965] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1400.530988] binder: 25332:25343 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:27 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:27 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:27 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:27 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1400.604711] binder: BINDER_SET_CONTEXT_MGR already set
[ 1400.604721] binder: 25373:25380 ioctl 40046207 0 returned -16
15:38:27 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:27 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:27 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1400.604833] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1400.604857] binder: 25373:25380 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:27 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:27 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1400.793946] binder: BINDER_SET_CONTEXT_MGR already set
[ 1400.793956] binder: 25430:25461 ioctl 40046207 0 returned -16
[ 1400.794072] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:27 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:27 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1400.794094] binder: 25430:25461 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:27 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:27 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1400.953657] binder: BINDER_SET_CONTEXT_MGR already set
[ 1400.953667] binder: 25555:25566 ioctl 40046207 0 returned -16
[ 1400.954799] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:27 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:27 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:27 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1400.954824] binder: 25555:25566 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:27 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:27 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1401.041109] binder: BINDER_SET_CONTEXT_MGR already set
[ 1401.041120] binder: 25631:25671 ioctl 40046207 0 returned -16
[ 1401.041252] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1401.041276] binder: 25631:25671 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1401.111225] binder: BINDER_SET_CONTEXT_MGR already set
15:38:27 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:27 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1401.111235] binder: 25698:25706 ioctl 40046207 0 returned -16
[ 1401.111430] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:27 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:27 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1401.111453] binder: 25698:25706 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:28 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:28 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1401.353316] binder: BINDER_SET_CONTEXT_MGR already set
15:38:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:28 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:28 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:28 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1401.353326] binder: 25817:25843 ioctl 40046207 0 returned -16
[ 1401.353450] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1401.353473] binder: 25817:25843 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:28 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:28 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:28 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1401.419315] binder: BINDER_SET_CONTEXT_MGR already set
[ 1401.419324] binder: 25888:25890 ioctl 40046207 0 returned -16
[ 1401.419439] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1401.419462] binder: 25888:25890 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1401.522280] binder: BINDER_SET_CONTEXT_MGR already set
15:38:28 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1401.522290] binder: 25937:25955 ioctl 40046207 0 returned -16
[ 1401.522401] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1401.522424] binder: 25937:25955 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:28 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:28 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1401.611875] binder: BINDER_SET_CONTEXT_MGR already set
15:38:28 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1401.611885] binder: 25992:26007 ioctl 40046207 0 returned -16
15:38:28 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:28 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1401.611990] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1401.612012] binder: 25992:26007 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1401.721387] binder: BINDER_SET_CONTEXT_MGR already set
15:38:28 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:28 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1401.721398] binder: 26080:26097 ioctl 40046207 0 returned -16
15:38:28 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:28 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1401.721528] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1401.721552] binder: 26080:26097 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:28 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:28 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:28 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1401.769703] binder: BINDER_SET_CONTEXT_MGR already set
15:38:28 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:28 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:28 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1401.769712] binder: 26101:26114 ioctl 40046207 0 returned -16
[ 1401.775028] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:28 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1401.775064] binder: 26101:26114 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:28 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:28 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:28 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:28 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1401.883019] binder: BINDER_SET_CONTEXT_MGR already set
[ 1401.883031] binder: 26191:26208 ioctl 40046207 0 returned -16
[ 1401.883179] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:29 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:29 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:29 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1401.883205] binder: 26191:26208 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1401.974572] binder: BINDER_SET_CONTEXT_MGR already set
[ 1401.974583] binder: 26280:26311 ioctl 40046207 0 returned -16
15:38:29 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:29 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1401.993159] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1401.993188] binder: 26280:26311 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:29 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1402.052937] binder: BINDER_SET_CONTEXT_MGR already set
15:38:29 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:29 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:29 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1402.052948] binder: 26332:26343 ioctl 40046207 0 returned -16
[ 1402.053093] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:29 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:29 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1402.053118] binder: 26332:26343 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:29 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:29 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:29 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1402.138214] binder: BINDER_SET_CONTEXT_MGR already set
[ 1402.138224] binder: 26355:26409 ioctl 40046207 0 returned -16
15:38:29 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:29 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1402.138355] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1402.138377] binder: 26355:26409 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1402.194628] binder: BINDER_SET_CONTEXT_MGR already set
15:38:29 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:29 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:29 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:29 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:29 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1402.194638] binder: 26458:26472 ioctl 40046207 0 returned -16
[ 1402.195008] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1402.195029] binder: 26458:26472 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:29 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:29 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:29 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1402.328753] binder: BINDER_SET_CONTEXT_MGR already set
[ 1402.328763] binder: 26537:26560 ioctl 40046207 0 returned -16
15:38:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:29 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:29 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1402.328898] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1402.328921] binder: 26537:26560 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:29 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:29 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:29 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1402.434588] binder: BINDER_SET_CONTEXT_MGR already set
[ 1402.434598] binder: 26602:26655 ioctl 40046207 0 returned -16
[ 1402.434724] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:29 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1402.434748] binder: 26602:26655 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1402.606791] binder: BINDER_SET_CONTEXT_MGR already set
15:38:30 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:30 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:30 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:30 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1402.606801] binder: 26706:26747 ioctl 40046207 0 returned -16
[ 1402.606916] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1402.606940] binder: 26706:26747 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:30 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1402.791150] binder: BINDER_SET_CONTEXT_MGR already set
[ 1402.791161] binder: 26894:26915 ioctl 40046207 0 returned -16
[ 1402.791277] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:30 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:30 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1402.791301] binder: 26894:26915 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:30 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:30 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:30 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1402.872615] binder: BINDER_SET_CONTEXT_MGR already set
[ 1402.872625] binder: 26962:26983 ioctl 40046207 0 returned -16
[ 1402.872795] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:30 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1402.872817] binder: 26962:26983 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1402.899456] binder: BINDER_SET_CONTEXT_MGR already set
[ 1402.899466] binder: 27022:27081 ioctl 40046207 0 returned -16
[ 1402.899588] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1402.899610] binder: 27022:27081 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:30 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:30 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:30 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:30 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:30 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1402.990248] binder: BINDER_SET_CONTEXT_MGR already set
[ 1402.990258] binder: 27084:27107 ioctl 40046207 0 returned -16
[ 1402.992599] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:30 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:30 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1402.992623] binder: 27084:27107 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:30 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1403.036402] binder: BINDER_SET_CONTEXT_MGR already set
[ 1403.036412] binder: 27135:27141 ioctl 40046207 0 returned -16
15:38:30 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1403.036528] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1403.036560] binder: 27135:27141 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1403.300129] binder: BINDER_SET_CONTEXT_MGR already set
15:38:30 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:30 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:30 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1403.300139] binder: 27205:27331 ioctl 40046207 0 returned -16
15:38:30 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:30 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1403.300246] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1403.300269] binder: 27205:27331 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:30 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:30 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:30 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1403.421813] binder: BINDER_SET_CONTEXT_MGR already set
[ 1403.421824] binder: 27386:27417 ioctl 40046207 0 returned -16
[ 1403.421946] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1403.421971] binder: 27386:27417 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:30 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:30 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:30 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1403.485312] binder: BINDER_SET_CONTEXT_MGR already set
[ 1403.485321] binder: 27447:27465 ioctl 40046207 0 returned -16
15:38:31 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1403.485442] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:31 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:31 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:31 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1403.485464] binder: 27447:27465 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1403.625241] binder: BINDER_SET_CONTEXT_MGR already set
[ 1403.625251] binder: 27516:27531 ioctl 40046207 0 returned -16
15:38:31 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:31 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1403.625365] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1403.625389] binder: 27516:27531 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1403.685560] binder: BINDER_SET_CONTEXT_MGR already set
15:38:31 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:31 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1403.685571] binder: 27605:27632 ioctl 40046207 0 returned -16
[ 1403.685693] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1403.685718] binder: 27605:27632 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:31 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:31 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1403.740354] binder: BINDER_SET_CONTEXT_MGR already set
15:38:31 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1403.740365] binder: 27683:27690 ioctl 40046207 0 returned -16
[ 1403.740477] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:31 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:31 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:31 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:31 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1403.740501] binder: 27683:27690 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1403.879101] binder: BINDER_SET_CONTEXT_MGR already set
[ 1403.879111] binder: 27723:27779 ioctl 40046207 0 returned -16
[ 1403.879232] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1403.879254] binder: 27723:27779 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:31 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1403.978942] binder: BINDER_SET_CONTEXT_MGR already set
15:38:31 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:31 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1403.978952] binder: 27848:27852 ioctl 40046207 0 returned -16
[ 1403.979082] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1403.979114] binder: 27848:27852 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:31 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:31 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:31 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1404.114592] binder: BINDER_SET_CONTEXT_MGR already set
[ 1404.114601] binder: 27891:27966 ioctl 40046207 0 returned -16
[ 1404.114708] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1404.114730] binder: 27891:27966 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:31 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:31 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:31 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:31 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1404.185214] binder: BINDER_SET_CONTEXT_MGR already set
[ 1404.185225] binder: 28005:28011 ioctl 40046207 0 returned -16
[ 1404.185397] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1404.185418] binder: 28005:28011 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1404.344300] binder: BINDER_SET_CONTEXT_MGR already set
[ 1404.344310] binder: 28088:28112 ioctl 40046207 0 returned -16
[ 1404.344423] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:31 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:31 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1404.344447] binder: 28088:28112 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:32 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:32 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1404.433887] binder: BINDER_SET_CONTEXT_MGR already set
[ 1404.433898] binder: 28153:28217 ioctl 40046207 0 returned -16
[ 1404.434505] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:32 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:32 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:32 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1404.434597] binder: 28153:28217 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1404.553644] binder: BINDER_SET_CONTEXT_MGR already set
15:38:32 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1404.553654] binder: 28307:28365 ioctl 40046207 0 returned -16
[ 1404.589799] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1404.589830] binder: 28307:28365 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:32 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:32 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:32 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:32 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:32 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1404.701156] binder: BINDER_SET_CONTEXT_MGR already set
15:38:32 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:32 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:32 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1404.701166] binder: 28424:28437 ioctl 40046207 0 returned -16
[ 1404.701280] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1404.701303] binder: 28424:28437 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:32 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1404.770327] binder: BINDER_SET_CONTEXT_MGR already set
15:38:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:32 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1404.770337] binder: 28530:28560 ioctl 40046207 0 returned -16
[ 1404.770452] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:32 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:32 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:32 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1404.770477] binder: 28530:28560 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:32 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:32 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:32 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1404.897279] binder: BINDER_SET_CONTEXT_MGR already set
[ 1404.897290] binder: 28585:28625 ioctl 40046207 0 returned -16
15:38:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:32 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1404.897407] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1404.897431] binder: 28585:28625 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:32 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:32 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:32 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1405.029270] binder: BINDER_SET_CONTEXT_MGR already set
[ 1405.029280] binder: 28678:28763 ioctl 40046207 0 returned -16
[ 1405.029411] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1405.029432] binder: 28678:28763 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1405.114238] binder: BINDER_SET_CONTEXT_MGR already set
[ 1405.114251] binder: 28794:28801 ioctl 40046207 0 returned -16
[ 1405.126066] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:32 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:32 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:32 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1405.126091] binder: 28794:28801 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:32 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1405.168317] binder: BINDER_SET_CONTEXT_MGR already set
15:38:33 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1405.168327] binder: 28849:28892 ioctl 40046207 0 returned -16
[ 1405.168551] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:33 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1405.168577] binder: 28849:28892 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:33 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1405.268128] binder: BINDER_SET_CONTEXT_MGR already set
[ 1405.268138] binder: 28923:28939 ioctl 40046207 0 returned -16
15:38:33 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:33 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1405.274499] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:33 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:33 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:33 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1405.274525] binder: 28923:28939 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1405.355957] binder: BINDER_SET_CONTEXT_MGR already set
[ 1405.355969] binder: 29005:29029 ioctl 40046207 0 returned -16
15:38:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:33 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1405.356285] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1405.356308] binder: 29005:29029 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:33 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1405.446574] binder: BINDER_SET_CONTEXT_MGR already set
15:38:33 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:33 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:33 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1405.446584] binder: 29114:29128 ioctl 40046207 0 returned -16
[ 1405.448183] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1405.448208] binder: 29114:29128 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:33 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:33 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1405.607076] binder: BINDER_SET_CONTEXT_MGR already set
15:38:33 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:33 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:33 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1405.607094] binder: 29208:29242 ioctl 40046207 0 returned -16
[ 1405.627663] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1405.627691] binder: 29208:29242 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:33 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:33 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1405.754959] binder: BINDER_SET_CONTEXT_MGR already set
[ 1405.754969] binder: 29292:29372 ioctl 40046207 0 returned -16
[ 1405.755090] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:33 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:33 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1405.755115] binder: 29292:29372 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1405.868516] binder: BINDER_SET_CONTEXT_MGR already set
15:38:33 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1405.868526] binder: 29407:29449 ioctl 40046207 0 returned -16
[ 1405.868712] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:33 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:33 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1405.868736] binder: 29407:29449 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:33 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:33 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:33 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1405.969980] binder: BINDER_SET_CONTEXT_MGR already set
[ 1405.969989] binder: 29515:29555 ioctl 40046207 0 returned -16
[ 1405.970116] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1405.970140] binder: 29515:29555 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1406.117219] binder: BINDER_SET_CONTEXT_MGR already set
15:38:33 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:33 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:33 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1406.117229] binder: 29597:29644 ioctl 40046207 0 returned -16
[ 1406.118402] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:34 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:34 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:34 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1406.118426] binder: 29597:29644 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1406.239471] binder: BINDER_SET_CONTEXT_MGR already set
15:38:34 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1406.239482] binder: 29699:29709 ioctl 40046207 0 returned -16
[ 1406.253577] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:34 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1406.253603] binder: 29699:29709 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:34 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:34 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:34 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1406.451761] binder: BINDER_SET_CONTEXT_MGR already set
15:38:34 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1406.451772] binder: 29791:29824 ioctl 40046207 0 returned -16
15:38:34 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:34 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:34 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:34 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1406.452585] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1406.452608] binder: 29791:29824 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1406.544492] binder: BINDER_SET_CONTEXT_MGR already set
[ 1406.544841] binder: 29868:29873 ioctl 40046207 0 returned -16
[ 1406.544966] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:34 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:34 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1406.544990] binder: 29868:29873 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:34 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1406.629800] binder: BINDER_SET_CONTEXT_MGR already set
15:38:34 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:34 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:34 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1406.629810] binder: 29891:29905 ioctl 40046207 0 returned -16
[ 1406.629925] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:34 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:34 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:34 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1406.629949] binder: 29891:29905 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1406.710191] binder: BINDER_SET_CONTEXT_MGR already set
[ 1406.710202] binder: 29965:29974 ioctl 40046207 0 returned -16
[ 1406.710321] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:34 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1406.710345] binder: 29965:29974 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:34 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:34 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1406.813648] binder: BINDER_SET_CONTEXT_MGR already set
15:38:34 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:34 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1406.813658] binder: 30020:30024 ioctl 40046207 0 returned -16
15:38:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:34 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:34 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:34 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1406.813786] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1406.813808] binder: 30020:30024 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:34 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1406.895194] binder: BINDER_SET_CONTEXT_MGR already set
[ 1406.895204] binder: 30048:30067 ioctl 40046207 0 returned -16
[ 1406.896005] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1406.896028] binder: 30048:30067 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1406.967874] binder: BINDER_SET_CONTEXT_MGR already set
15:38:34 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1406.967884] binder: 30107:30132 ioctl 40046207 0 returned -16
15:38:34 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1406.968186] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1406.968209] binder: 30107:30132 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:35 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:35 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1407.044727] binder: BINDER_SET_CONTEXT_MGR already set
[ 1407.044738] binder: 30171:30175 ioctl 40046207 0 returned -16
15:38:35 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:35 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:35 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1407.044845] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1407.044871] binder: 30171:30175 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:35 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:35 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1407.116638] binder: BINDER_SET_CONTEXT_MGR already set
15:38:35 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:35 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1407.116648] binder: 30197:30224 ioctl 40046207 0 returned -16
[ 1407.116768] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:35 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:35 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:35 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:35 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1407.116792] binder: 30197:30224 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1407.266568] binder: BINDER_SET_CONTEXT_MGR already set
[ 1407.266578] binder: 30281:30348 ioctl 40046207 0 returned -16
[ 1407.266706] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1407.266729] binder: 30281:30348 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1407.397979] binder: BINDER_SET_CONTEXT_MGR already set
15:38:35 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:35 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1407.397990] binder: 30399:30429 ioctl 40046207 0 returned -16
[ 1407.398159] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1407.398183] binder: 30399:30429 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:35 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:35 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:35 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1407.474280] binder: BINDER_SET_CONTEXT_MGR already set
[ 1407.474290] binder: 30503:30515 ioctl 40046207 0 returned -16
[ 1407.474424] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1407.474448] binder: 30503:30515 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1407.528659] binder: BINDER_SET_CONTEXT_MGR already set
15:38:35 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:35 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:35 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1407.528670] binder: 30547:30561 ioctl 40046207 0 returned -16
[ 1407.528775] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:35 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1407.528797] binder: 30547:30561 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:35 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:35 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1407.592461] binder: BINDER_SET_CONTEXT_MGR already set
[ 1407.592471] binder: 30606:30624 ioctl 40046207 0 returned -16
[ 1407.592611] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:35 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1407.592632] binder: 30606:30624 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:35 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:35 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1407.710845] binder: BINDER_SET_CONTEXT_MGR already set
[ 1407.710855] binder: 30688:30699 ioctl 40046207 0 returned -16
[ 1407.710966] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1407.710988] binder: 30688:30699 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1407.812713] binder: BINDER_SET_CONTEXT_MGR already set
[ 1407.812723] binder: 30765:30785 ioctl 40046207 0 returned -16
15:38:35 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:35 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1407.812854] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1407.812877] binder: 30765:30785 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:35 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1407.903271] binder: BINDER_SET_CONTEXT_MGR already set
15:38:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1407.903281] binder: 30849:30867 ioctl 40046207 0 returned -16
15:38:35 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:35 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:35 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1407.903410] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1407.903432] binder: 30849:30867 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:36 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:36 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:36 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:36 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1408.118370] binder: BINDER_SET_CONTEXT_MGR already set
[ 1408.118379] binder: 30978:31003 ioctl 40046207 0 returned -16
15:38:36 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:36 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:36 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1408.118507] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:36 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:36 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:36 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:36 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1408.118532] binder: 30978:31003 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1408.206018] binder: BINDER_SET_CONTEXT_MGR already set
[ 1408.206029] binder: 31031:31061 ioctl 40046207 0 returned -16
[ 1408.206163] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1408.206188] binder: 31031:31061 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1408.282654] binder: BINDER_SET_CONTEXT_MGR already set
15:38:36 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1408.282664] binder: 31088:31100 ioctl 40046207 0 returned -16
[ 1408.282853] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1408.282875] binder: 31088:31100 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1408.444251] binder: BINDER_SET_CONTEXT_MGR already set
[ 1408.444261] binder: 31129:31226 ioctl 40046207 0 returned -16
[ 1408.444509] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1408.444531] binder: 31129:31226 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:36 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1408.511956] binder: BINDER_SET_CONTEXT_MGR already set
[ 1408.511966] binder: 31248:31268 ioctl 40046207 0 returned -16
[ 1408.512166] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1408.512189] binder: 31248:31268 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:36 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:36 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1408.601012] binder: BINDER_SET_CONTEXT_MGR already set
15:38:36 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:36 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:36 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1408.601022] binder: 31303:31315 ioctl 40046207 0 returned -16
[ 1408.601160] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1408.601184] binder: 31303:31315 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:36 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:36 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:36 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1408.790016] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:36 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:36 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1408.790039] binder: 31400:31419 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:36 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:36 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1408.933377] binder: BINDER_SET_CONTEXT_MGR already set
[ 1408.933387] binder: 31544:31592 ioctl 40046207 0 returned -16
[ 1408.933539] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:36 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1408.933571] binder: 31544:31592 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:36 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:36 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:36 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1409.028635] binder: BINDER_SET_CONTEXT_MGR already set
[ 1409.028645] binder: 31647:31711 ioctl 40046207 0 returned -16
[ 1409.028779] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:36 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:36 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1409.028804] binder: 31647:31711 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1409.126854] binder: BINDER_SET_CONTEXT_MGR already set
[ 1409.126864] binder: 31733:31759 ioctl 40046207 0 returned -16
15:38:36 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:36 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:36 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1409.126978] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1409.127003] binder: 31733:31759 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:36 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:36 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:36 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1409.207261] binder: BINDER_SET_CONTEXT_MGR already set
15:38:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:37 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:37 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:37 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1409.207272] binder: 31804:31825 ioctl 40046207 0 returned -16
[ 1409.207383] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:37 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:37 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:37 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1409.207405] binder: 31804:31825 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:37 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:37 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:37 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:37 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:37 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1409.258513] binder: BINDER_SET_CONTEXT_MGR already set
[ 1409.258522] binder: 31857:31861 ioctl 40046207 0 returned -16
[ 1409.259680] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:37 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1409.259703] binder: 31857:31861 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1409.330538] binder: BINDER_SET_CONTEXT_MGR already set
15:38:37 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:37 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:37 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:37 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1409.330560] binder: 31918:31929 ioctl 40046207 0 returned -16
[ 1409.330829] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1409.330853] binder: 31918:31929 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1409.423931] binder: BINDER_SET_CONTEXT_MGR already set
[ 1409.423941] binder: 31963:32008 ioctl 40046207 0 returned -16
15:38:37 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1409.424087] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1409.424110] binder: 31963:32008 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1409.480165] binder: BINDER_SET_CONTEXT_MGR already set
15:38:37 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1409.480175] binder: 32020:32034 ioctl 40046207 0 returned -16
[ 1409.480294] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:37 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:37 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1409.480318] binder: 32020:32034 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1409.637673] binder: BINDER_SET_CONTEXT_MGR already set
15:38:37 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:37 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1409.637683] binder: 32051:32138 ioctl 40046207 0 returned -16
15:38:37 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1409.638052] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:37 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:37 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:37 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:37 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1409.638076] binder: 32051:32138 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:37 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:37 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:37 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1409.803896] binder: BINDER_SET_CONTEXT_MGR already set
[ 1409.803907] binder: 32175:32246 ioctl 40046207 0 returned -16
15:38:37 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:37 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1409.804041] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1409.804065] binder: 32175:32246 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1409.921390] binder: BINDER_SET_CONTEXT_MGR already set
[ 1409.921401] binder: 32265:32278 ioctl 40046207 0 returned -16
15:38:38 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:38 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1409.921533] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1409.921556] binder: 32265:32278 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:38 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:38 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1410.063160] binder: BINDER_SET_CONTEXT_MGR already set
[ 1410.063172] binder: 32330:32341 ioctl 40046207 0 returned -16
15:38:38 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:38 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1410.063308] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1410.063329] binder: 32330:32341 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:38 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:38 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:38 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:38 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1410.190096] binder: BINDER_SET_CONTEXT_MGR already set
[ 1410.190106] binder: 32512:32514 ioctl 40046207 0 returned -16
[ 1410.190241] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:38 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:38 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:38 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1410.190264] binder: 32512:32514 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1410.286246] binder: BINDER_SET_CONTEXT_MGR already set
[ 1410.286255] binder: 32567:32580 ioctl 40046207 0 returned -16
15:38:38 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1410.286414] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1410.286436] binder: 32567:32580 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1410.342619] binder: BINDER_SET_CONTEXT_MGR already set
15:38:38 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:38 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1410.342629] binder: 32645:32651 ioctl 40046207 0 returned -16
[ 1410.342757] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1410.342781] binder: 32645:32651 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:38 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:38 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:38 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:38 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1410.467455] binder: BINDER_SET_CONTEXT_MGR already set
[ 1410.467465] binder: 32704:322 ioctl 40046207 0 returned -16
[ 1410.467967] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:38 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:38 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:38 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1410.467990] binder: 32704:322 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1410.580221] binder: BINDER_SET_CONTEXT_MGR already set
[ 1410.580230] binder: 369:400 ioctl 40046207 0 returned -16
[ 1410.580335] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1410.580356] binder: 369:400 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:38 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1410.658514] binder: BINDER_SET_CONTEXT_MGR already set
[ 1410.658523] binder: 444:449 ioctl 40046207 0 returned -16
15:38:38 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:38 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:38 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1410.658654] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1410.658677] binder: 444:449 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1410.729913] binder: BINDER_SET_CONTEXT_MGR already set
[ 1410.729922] binder: 512:518 ioctl 40046207 0 returned -16
[ 1410.730039] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1410.730061] binder: 512:518 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1410.777377] binder: BINDER_SET_CONTEXT_MGR already set
15:38:38 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:38 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:38 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:38 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:38 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1410.777386] binder: 546:551 ioctl 40046207 0 returned -16
[ 1410.777499] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:39 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1410.777522] binder: 546:551 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:39 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:39 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:39 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:39 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:39 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1410.874541] binder: BINDER_SET_CONTEXT_MGR already set
[ 1410.874550] binder: 599:626 ioctl 40046207 0 returned -16
15:38:39 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:39 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:39 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1410.874679] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1410.874702] binder: 599:626 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:39 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:39 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:39 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1410.995499] binder: BINDER_SET_CONTEXT_MGR already set
[ 1410.995509] binder: 671:683 ioctl 40046207 0 returned -16
[ 1410.996005] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1410.996029] binder: 671:683 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1411.122355] binder: BINDER_SET_CONTEXT_MGR already set
[ 1411.122365] binder: 763:811 ioctl 40046207 0 returned -16
15:38:39 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:39 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:39 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:39 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:39 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1411.122591] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1411.122614] binder: 763:811 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:39 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:39 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1411.319478] binder: BINDER_SET_CONTEXT_MGR already set
15:38:39 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:39 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:39 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:39 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1411.319488] binder: 840:960 ioctl 40046207 0 returned -16
[ 1411.319632] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1411.319653] binder: 840:960 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1411.513000] binder: BINDER_SET_CONTEXT_MGR already set
[ 1411.513012] binder: 1014:1031 ioctl 40046207 0 returned -16
[ 1411.516477] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:39 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:39 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1411.516501] binder: 1014:1031 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1411.680563] binder: BINDER_SET_CONTEXT_MGR already set
[ 1411.680573] binder: 1189:1229 ioctl 40046207 0 returned -16
[ 1411.680704] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:39 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:39 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:39 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1411.680727] binder: 1189:1229 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:39 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1411.738940] binder: BINDER_SET_CONTEXT_MGR already set
15:38:39 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:39 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:39 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:39 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:39 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1411.738950] binder: 1262:1270 ioctl 40046207 0 returned -16
[ 1411.739076] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1411.739099] binder: 1262:1270 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1411.880981] binder: BINDER_SET_CONTEXT_MGR already set
[ 1411.880991] binder: 1305:1325 ioctl 40046207 0 returned -16
[ 1411.881113] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1411.881135] binder: 1305:1325 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1412.018306] binder: BINDER_SET_CONTEXT_MGR already set
[ 1412.018316] binder: 1485:1503 ioctl 40046207 0 returned -16
[ 1412.018444] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1412.018467] binder: 1485:1503 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1412.085715] binder: BINDER_SET_CONTEXT_MGR already set
[ 1412.085725] binder: 1539:1567 ioctl 40046207 0 returned -16
[ 1412.085840] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1412.085863] binder: 1539:1567 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1412.137240] binder: BINDER_SET_CONTEXT_MGR already set
[ 1412.137250] binder: 1592:1629 ioctl 40046207 0 returned -16
[ 1412.137375] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:39 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:39 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1412.137399] binder: 1592:1629 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1412.253878] binder: BINDER_SET_CONTEXT_MGR already set
[ 1412.253888] binder: 1658:1721 ioctl 40046207 0 returned -16
[ 1412.254000] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1412.254023] binder: 1658:1721 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:40 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1412.304134] binder: BINDER_SET_CONTEXT_MGR already set
[ 1412.304144] binder: 1752:1789 ioctl 40046207 0 returned -16
15:38:40 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:40 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1412.304257] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1412.304280] binder: 1752:1789 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1412.470247] binder: BINDER_SET_CONTEXT_MGR already set
[ 1412.470259] binder: 1868:1899 ioctl 40046207 0 returned -16
[ 1412.470376] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1412.470400] binder: 1868:1899 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:40 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:40 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:40 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:40 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1412.533409] binder: BINDER_SET_CONTEXT_MGR already set
15:38:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:40 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:40 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1412.533419] binder: 1945:1961 ioctl 40046207 0 returned -16
[ 1412.533538] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:40 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:40 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1412.533570] binder: 1945:1961 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1412.596697] binder: BINDER_SET_CONTEXT_MGR already set
15:38:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:40 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1412.596706] binder: 1970:1976 ioctl 40046207 0 returned -16
15:38:40 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1412.596825] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1412.596848] binder: 1970:1976 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1412.727206] binder: BINDER_SET_CONTEXT_MGR already set
15:38:40 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:40 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:40 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:40 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:40 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1412.727216] binder: 2027:2072 ioctl 40046207 0 returned -16
[ 1412.727332] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:40 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1412.727355] binder: 2027:2072 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1412.882016] binder: BINDER_SET_CONTEXT_MGR already set
15:38:40 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:40 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1412.882026] binder: 2208:2217 ioctl 40046207 0 returned -16
[ 1412.882158] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:40 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:40 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1412.882180] binder: 2208:2217 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1412.943641] binder: BINDER_SET_CONTEXT_MGR already set
[ 1412.943651] binder: 2222:2242 ioctl 40046207 0 returned -16
15:38:40 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1412.943776] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1412.943870] binder: 2222:2242 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:40 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:40 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1413.010508] binder: BINDER_SET_CONTEXT_MGR already set
15:38:40 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:40 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1413.010519] binder: 2248:2274 ioctl 40046207 0 returned -16
[ 1413.017627] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:40 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:40 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1413.017653] binder: 2248:2274 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1413.181201] binder: BINDER_SET_CONTEXT_MGR already set
[ 1413.181215] binder: 2300:2411 ioctl 40046207 0 returned -16
[ 1413.181632] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:41 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1413.181655] binder: 2300:2411 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:41 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1413.306623] binder: BINDER_SET_CONTEXT_MGR already set
15:38:41 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:41 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:41 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1413.306634] binder: 2466:2512 ioctl 40046207 0 returned -16
15:38:41 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:41 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1413.307136] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1413.307159] binder: 2466:2512 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:41 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:41 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1413.416945] binder: BINDER_SET_CONTEXT_MGR already set
[ 1413.416955] binder: 2569:2582 ioctl 40046207 0 returned -16
[ 1413.417239] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:41 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:41 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1413.417263] binder: 2569:2582 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1413.648002] binder: BINDER_SET_CONTEXT_MGR already set
15:38:41 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1413.648012] binder: 2618:2709 ioctl 40046207 0 returned -16
[ 1413.648130] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:41 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1413.648153] binder: 2618:2709 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1413.823581] binder: BINDER_SET_CONTEXT_MGR already set
15:38:41 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:41 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:41 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:41 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:41 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1413.823591] binder: 2806:2833 ioctl 40046207 0 returned -16
[ 1413.823712] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:41 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:41 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:41 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1413.823736] binder: 2806:2833 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1413.972968] binder: BINDER_SET_CONTEXT_MGR already set
[ 1413.972977] binder: 2861:2902 ioctl 40046207 0 returned -16
[ 1413.973086] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:41 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1413.973111] binder: 2861:2902 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1414.147338] binder: BINDER_SET_CONTEXT_MGR already set
15:38:41 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:41 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:41 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1414.147348] binder: 2963:2997 ioctl 40046207 0 returned -16
[ 1414.147480] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:41 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1414.147502] binder: 2963:2997 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:41 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:41 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1414.300835] binder: BINDER_SET_CONTEXT_MGR already set
15:38:41 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:41 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1414.300846] binder: 3086:3092 ioctl 40046207 0 returned -16
[ 1414.300963] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:41 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:41 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1414.300986] binder: 3086:3092 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1414.365617] binder: BINDER_SET_CONTEXT_MGR already set
[ 1414.365627] binder: 3146:3158 ioctl 40046207 0 returned -16
[ 1414.365738] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:42 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1414.365761] binder: 3146:3158 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1414.539149] binder: BINDER_SET_CONTEXT_MGR already set
15:38:42 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:42 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:42 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1414.539158] binder: 3205:3324 ioctl 40046207 0 returned -16
[ 1414.539268] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:42 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:42 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:42 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1414.539291] binder: 3205:3324 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1414.705713] binder: BINDER_SET_CONTEXT_MGR already set
[ 1414.705723] binder: 3419:3433 ioctl 40046207 0 returned -16
15:38:42 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1414.705898] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1414.705921] binder: 3419:3433 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1414.866562] binder: BINDER_SET_CONTEXT_MGR already set
15:38:42 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:42 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:42 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:42 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:42 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1414.866571] binder: 3457:3505 ioctl 40046207 0 returned -16
15:38:42 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1414.866684] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1414.866706] binder: 3457:3505 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:42 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:42 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1415.010050] binder: BINDER_SET_CONTEXT_MGR already set
[ 1415.010060] binder: 3603:3640 ioctl 40046207 0 returned -16
15:38:42 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:42 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:42 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1415.010235] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1415.010259] binder: 3603:3640 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:42 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1415.085240] binder: BINDER_SET_CONTEXT_MGR already set
15:38:42 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:42 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:42 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:42 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:42 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1415.085250] binder: 3672:3680 ioctl 40046207 0 returned -16
[ 1415.085373] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:42 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1415.085395] binder: 3672:3680 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:42 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1415.210538] binder: BINDER_SET_CONTEXT_MGR already set
15:38:42 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:42 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:42 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:42 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1415.210561] binder: 3724:3726 ioctl 40046207 0 returned -16
[ 1415.210702] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:42 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1415.210723] binder: 3724:3726 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1415.253317] binder: BINDER_SET_CONTEXT_MGR already set
[ 1415.253327] binder: 3766:3806 ioctl 40046207 0 returned -16
15:38:43 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:43 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:43 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:43 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:43 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1415.253458] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:43 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1415.253480] binder: 3766:3806 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1415.525076] binder: BINDER_SET_CONTEXT_MGR already set
15:38:43 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:43 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1415.525089] binder: 3992:4021 ioctl 40046207 0 returned -16
15:38:43 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:43 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1415.525218] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1415.525241] binder: 3992:4021 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1415.721734] binder: BINDER_SET_CONTEXT_MGR already set
[ 1415.721746] binder: 4120:4176 ioctl 40046207 0 returned -16
15:38:43 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:43 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:43 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1415.721873] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:43 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:43 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1415.721897] binder: 4120:4176 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:43 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:43 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:43 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1415.835439] binder: BINDER_SET_CONTEXT_MGR already set
[ 1415.835448] binder: 4323:4355 ioctl 40046207 0 returned -16
[ 1415.835598] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:43 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:43 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1415.835621] binder: 4323:4355 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1415.894244] binder: BINDER_SET_CONTEXT_MGR already set
[ 1415.894255] binder: 4380:4386 ioctl 40046207 0 returned -16
15:38:43 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:43 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1415.894366] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1415.894389] binder: 4380:4386 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:43 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:43 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1416.155125] binder: BINDER_SET_CONTEXT_MGR already set
15:38:43 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:43 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:43 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:43 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:43 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1416.155135] binder: 4479:4535 ioctl 40046207 0 returned -16
[ 1416.155261] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1416.155283] binder: 4479:4535 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1416.298034] binder: BINDER_SET_CONTEXT_MGR already set
15:38:43 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1416.298044] binder: 4627:4646 ioctl 40046207 0 returned -16
[ 1416.298185] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1416.298223] binder: 4627:4646 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1416.462811] binder: BINDER_SET_CONTEXT_MGR already set
[ 1416.462822] binder: 4852:4879 ioctl 40046207 0 returned -16
15:38:43 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1416.463027] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1416.463059] binder: 4852:4879 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:43 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:43 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1416.610301] binder: BINDER_SET_CONTEXT_MGR already set
15:38:43 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1416.610311] binder: 4911:4934 ioctl 40046207 0 returned -16
15:38:43 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:43 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1416.610440] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1416.610461] binder: 4911:4934 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:43 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:43 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:43 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:43 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1416.654559] binder: BINDER_SET_CONTEXT_MGR already set
15:38:43 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1416.654569] binder: 5020:5047 ioctl 40046207 0 returned -16
15:38:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:44 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1416.654696] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1416.654719] binder: 5020:5047 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:44 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1416.721379] binder: BINDER_SET_CONTEXT_MGR already set
15:38:44 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:44 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:44 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1416.721390] binder: 5074:5103 ioctl 40046207 0 returned -16
[ 1416.721743] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1416.721766] binder: 5074:5103 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:44 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:44 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1416.907593] binder: BINDER_SET_CONTEXT_MGR already set
[ 1416.907603] binder: 5281:5329 ioctl 40046207 0 returned -16
[ 1416.907715] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:44 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:44 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:44 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:44 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1416.907747] binder: 5281:5329 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:44 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1417.000333] binder: BINDER_SET_CONTEXT_MGR already set
[ 1417.000343] binder: 5428:5454 ioctl 40046207 0 returned -16
[ 1417.000455] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:44 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:44 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:44 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1417.000478] binder: 5428:5454 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:44 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:44 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1417.065752] binder: BINDER_SET_CONTEXT_MGR already set
[ 1417.065761] binder: 5485:5495 ioctl 40046207 0 returned -16
[ 1417.065871] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:44 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:44 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:44 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1417.065895] binder: 5485:5495 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1417.164106] binder: BINDER_SET_CONTEXT_MGR already set
15:38:44 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:44 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:44 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1417.164126] binder: 5532:5563 ioctl 40046207 0 returned -16
[ 1417.164275] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1417.164299] binder: 5532:5563 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:44 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:44 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1417.216185] binder: BINDER_SET_CONTEXT_MGR already set
[ 1417.216196] binder: 5577:5652 ioctl 40046207 0 returned -16
[ 1417.216332] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:44 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:44 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1417.216355] binder: 5577:5652 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1417.359955] binder: BINDER_SET_CONTEXT_MGR already set
[ 1417.359966] binder: 5816:5837 ioctl 40046207 0 returned -16
15:38:44 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1417.360095] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1417.360120] binder: 5816:5837 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:44 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:45 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:45 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:45 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1417.492185] binder: BINDER_SET_CONTEXT_MGR already set
[ 1417.492196] binder: 5891:5923 ioctl 40046207 0 returned -16
15:38:45 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1417.492348] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1417.492372] binder: 5891:5923 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:45 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:45 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:45 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1417.541291] binder: BINDER_SET_CONTEXT_MGR already set
[ 1417.541304] binder: 5952:5986 ioctl 40046207 0 returned -16
15:38:45 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1417.541430] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1417.541452] binder: 5952:5986 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:45 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:45 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:45 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1417.690285] binder: BINDER_SET_CONTEXT_MGR already set
15:38:45 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1417.690295] binder: 6065:6085 ioctl 40046207 0 returned -16
[ 1417.690475] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:45 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:45 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1417.690500] binder: 6065:6085 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:45 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:45 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1417.816523] binder: BINDER_SET_CONTEXT_MGR already set
[ 1417.816533] binder: 6138:6190 ioctl 40046207 0 returned -16
[ 1417.816659] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:45 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:45 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:45 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1417.816682] binder: 6138:6190 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1417.958284] binder: BINDER_SET_CONTEXT_MGR already set
15:38:45 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:45 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1417.958296] binder: 6303:6321 ioctl 40046207 0 returned -16
[ 1417.958430] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1417.958453] binder: 6303:6321 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:45 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:45 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:45 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:45 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:45 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1418.033413] binder: BINDER_SET_CONTEXT_MGR already set
[ 1418.033423] binder: 6400:6407 ioctl 40046207 0 returned -16
15:38:45 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:45 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:45 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1418.033547] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1418.033578] binder: 6400:6407 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:45 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:45 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:45 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1418.162465] binder: BINDER_SET_CONTEXT_MGR already set
[ 1418.162476] binder: 6503:6553 ioctl 40046207 0 returned -16
15:38:45 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:45 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:45 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1418.162596] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1418.162618] binder: 6503:6553 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:45 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:45 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:46 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1418.241085] binder: BINDER_SET_CONTEXT_MGR already set
[ 1418.241095] binder: 6628:6653 ioctl 40046207 0 returned -16
15:38:46 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:46 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:46 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:46 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:46 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1418.241264] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1418.241288] binder: 6628:6653 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:46 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1418.285234] binder: BINDER_SET_CONTEXT_MGR already set
15:38:46 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:46 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:46 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:46 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1418.285245] binder: 6691:6703 ioctl 40046207 0 returned -16
[ 1418.285359] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:46 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:46 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:46 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1418.285383] binder: 6691:6703 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1418.424125] binder: BINDER_SET_CONTEXT_MGR already set
15:38:46 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:46 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1418.424135] binder: 6760:6856 ioctl 40046207 0 returned -16
15:38:46 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:46 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:46 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1418.424255] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1418.424280] binder: 6760:6856 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:46 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:46 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:46 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:46 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1418.583035] binder: BINDER_SET_CONTEXT_MGR already set
[ 1418.583045] binder: 7002:7050 ioctl 40046207 0 returned -16
15:38:46 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1418.583178] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1418.583201] binder: 7002:7050 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1418.671294] binder: BINDER_SET_CONTEXT_MGR already set
15:38:46 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:46 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:46 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:46 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:46 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1418.671303] binder: 7127:7157 ioctl 40046207 0 returned -16
[ 1418.671433] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:46 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:46 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1418.671456] binder: 7127:7157 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:46 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:46 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:46 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1418.940868] binder: BINDER_SET_CONTEXT_MGR already set
[ 1418.940878] binder: 7286:7342 ioctl 40046207 0 returned -16
[ 1418.941016] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1418.941040] binder: 7286:7342 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1419.011157] binder: BINDER_SET_CONTEXT_MGR already set
[ 1419.011166] binder: 7379:7415 ioctl 40046207 0 returned -16
[ 1419.011353] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:46 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:46 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:46 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1419.011379] binder: 7379:7415 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1419.160154] binder: BINDER_SET_CONTEXT_MGR already set
15:38:46 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:46 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:46 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1419.160164] binder: 7463:7574 ioctl 40046207 0 returned -16
[ 1419.160277] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:46 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:46 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1419.160299] binder: 7463:7574 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:46 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:47 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:47 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:47 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1419.329101] binder: BINDER_SET_CONTEXT_MGR already set
[ 1419.329112] binder: 7644:7670 ioctl 40046207 0 returned -16
15:38:47 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:47 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:47 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1419.329224] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1419.329246] binder: 7644:7670 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:47 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1419.400497] binder: BINDER_SET_CONTEXT_MGR already set
15:38:47 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:47 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:47 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:47 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:47 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1419.400508] binder: 7781:7806 ioctl 40046207 0 returned -16
[ 1419.400635] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1419.400659] binder: 7781:7806 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:47 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:47 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:47 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:47 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1419.526041] binder: BINDER_SET_CONTEXT_MGR already set
[ 1419.526050] binder: 7865:7874 ioctl 40046207 0 returned -16
[ 1419.526168] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:47 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1419.526190] binder: 7865:7874 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1419.590865] binder: BINDER_SET_CONTEXT_MGR already set
[ 1419.590876] binder: 7974:8010 ioctl 40046207 0 returned -16
15:38:47 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:47 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:47 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:47 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1419.590985] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1419.591008] binder: 7974:8010 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:47 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:47 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:47 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1419.733369] binder: BINDER_SET_CONTEXT_MGR already set
15:38:47 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1419.733379] binder: 8111:8143 ioctl 40046207 0 returned -16
15:38:47 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:47 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:47 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:47 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1419.733590] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1419.733614] binder: 8111:8143 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:47 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:47 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1419.783431] binder: BINDER_SET_CONTEXT_MGR already set
[ 1419.783441] binder: 8180:8192 ioctl 40046207 0 returned -16
[ 1419.783564] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1419.783589] binder: 8180:8192 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1419.970435] binder: BINDER_SET_CONTEXT_MGR already set
[ 1419.970445] binder: 8224:8369 ioctl 40046207 0 returned -16
[ 1419.970563] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1419.970588] binder: 8224:8369 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1420.134091] binder: BINDER_SET_CONTEXT_MGR already set
[ 1420.134102] binder: 8491:8514 ioctl 40046207 0 returned -16
[ 1420.134239] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:47 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1420.134264] binder: 8491:8514 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1420.328471] binder: BINDER_SET_CONTEXT_MGR already set
[ 1420.328481] binder: 8640:8662 ioctl 40046207 0 returned -16
[ 1420.328629] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1420.328652] binder: 8640:8662 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:47 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1420.401135] binder: BINDER_SET_CONTEXT_MGR already set
[ 1420.401145] binder: 8742:8750 ioctl 40046207 0 returned -16
[ 1420.401264] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:47 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:47 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:48 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:48 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1420.401287] binder: 8742:8750 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1420.433940] binder: BINDER_SET_CONTEXT_MGR already set
[ 1420.433950] binder: 8773:8802 ioctl 40046207 0 returned -16
[ 1420.434079] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1420.434101] binder: 8773:8802 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:48 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:48 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:48 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:48 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1420.539503] binder: BINDER_SET_CONTEXT_MGR already set
[ 1420.539520] binder: 8845:8892 ioctl 40046207 0 returned -16
[ 1420.539877] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:48 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:48 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:48 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1420.539899] binder: 8845:8892 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:48 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:48 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1420.692560] binder: BINDER_SET_CONTEXT_MGR already set
15:38:48 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:48 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1420.692573] binder: 9002:9008 ioctl 40046207 0 returned -16
[ 1420.692731] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:48 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:48 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1420.692754] binder: 9002:9008 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1420.843951] binder: BINDER_SET_CONTEXT_MGR already set
[ 1420.843961] binder: 9031:9162 ioctl 40046207 0 returned -16
15:38:48 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:48 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:48 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1420.844074] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1420.844097] binder: 9031:9162 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:48 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:48 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1421.028593] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1421.028618] binder: 9216:9267 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:48 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:48 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:48 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1421.088651] binder: BINDER_SET_CONTEXT_MGR already set
[ 1421.088661] binder: 9334:9360 ioctl 40046207 0 returned -16
15:38:48 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:48 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1421.089098] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1421.089120] binder: 9334:9360 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1421.165677] binder: BINDER_SET_CONTEXT_MGR already set
15:38:48 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:48 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:48 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1421.165685] binder: 9390:9399 ioctl 40046207 0 returned -16
[ 1421.165798] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:48 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:48 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:48 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:48 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

[ 1421.165819] binder: 9390:9399 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:48 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:48 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:48 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1421.227403] binder: BINDER_SET_CONTEXT_MGR already set
[ 1421.227412] binder: 9445:9466 ioctl 40046207 0 returned -16
[ 1421.227544] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:48 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:48 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1421.227566] binder: 9445:9466 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:49 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:49 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:49 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:49 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1421.251718] binder: BINDER_SET_CONTEXT_MGR already set
[ 1421.251727] binder: 9503:9525 ioctl 40046207 0 returned -16
[ 1421.251838] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:49 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:49 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:49 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1421.251860] binder: 9503:9525 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1421.312847] binder: BINDER_SET_CONTEXT_MGR already set
[ 1421.312856] binder: 9553:9558 ioctl 40046207 0 returned -16
15:38:49 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:49 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:49 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:49 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:49 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1421.312974] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1421.312998] binder: 9553:9558 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:49 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:49 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1421.385401] binder: BINDER_SET_CONTEXT_MGR already set
[ 1421.385411] binder: 9599:9650 ioctl 40046207 0 returned -16
15:38:49 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:49 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:49 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1421.385525] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1421.385546] binder: 9599:9650 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:49 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[ 1421.535199] binder: BINDER_SET_CONTEXT_MGR already set
[ 1421.535209] binder: 9709:9737 ioctl 40046207 0 returned -16
[ 1421.535320] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:49 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:49 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:49 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:49 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:49 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1421.535343] binder: 9709:9737 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1421.732388] binder: BINDER_SET_CONTEXT_MGR already set
15:38:49 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:49 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1421.732398] binder: 9882:9907 ioctl 40046207 0 returned -16
15:38:49 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:49 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1421.732648] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1421.732669] binder: 9882:9907 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:49 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:49 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:49 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1421.839905] binder: BINDER_SET_CONTEXT_MGR already set
[ 1421.839975] binder: 10018:10053 ioctl 40046207 0 returned -16
15:38:49 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:49 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1421.840086] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1421.840108] binder: 10018:10053 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:49 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:49 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:49 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:49 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:49 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1422.012173] binder: BINDER_SET_CONTEXT_MGR already set
[ 1422.012183] binder: 10155:10178 ioctl 40046207 0 returned -16
[ 1422.014593] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1422.014616] binder: 10155:10178 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1422.044594] binder: BINDER_SET_CONTEXT_MGR already set
[ 1422.044603] binder: 10210:10215 ioctl 40046207 0 returned -16
[ 1422.044717] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:49 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:49 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:49 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

[ 1422.044740] binder: 10210:10215 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:49 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:49 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:50 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1422.153882] binder: BINDER_SET_CONTEXT_MGR already set
15:38:50 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:50 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1422.153892] binder: 10260:10268 ioctl 40046207 0 returned -16
[ 1422.157189] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:50 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:50 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1422.157212] binder: 10260:10268 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1422.263704] binder: BINDER_SET_CONTEXT_MGR already set
[ 1422.263716] binder: 10309:10366 ioctl 40046207 0 returned -16
[ 1422.263828] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1422.263852] binder: 10309:10366 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
15:38:50 executing program 4:
clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
tkill(r0, 0x3b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x19})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

15:38:50 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(0xffffffffffffffff, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

15:38:50 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffff, 0x401, 0x5, 0x9c6, 0x7, 0x2, 0x3, 0x101, 0x28b, 0x40, 0x36, 0x3, 0x80, 0x38, 0x1, 0x3ff, 0x9}, [{0x70000000, 0x6, 0xffff, 0xffffffffc6ad228c, 0x9, 0x10000, 0x1, 0x4}, {0x6474e551, 0x0, 0x3, 0x5, 0x7724, 0x8, 0x1ff, 0x10001}], "4c6793d1edbba61685533e182e358688cfb6c40e28ff44f212c11bbede1592be72d5762dcd9f20a3e31c31c18e35dff253fd1a608780e18197521b835ed1b78e55abdf4c5f56b1bac65d38c3e7d679327585f42b48e286ee3af005c7919d96ed3ba15e2e453abe08bfc28393ead70b6085f8446091e9ebabd4c2f9b40b7f02005a42596e10c17e6f2626200a84cd1a07d0781e313b465bd5b90a2539a859a4ff5b275c23ad2b94d0fdfe38703fca36117c295a327a4440d3167c2def4eddb7b5778d9ee66860df94fc17a04aec1c3ad6ca26038cb10dd2550a758b71a95bc5e72568d9d321e6a14fdc59d44d4195381509a4", [[], [], [], [], [], [], [], []]}, 0x9a2)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup(r2)
clock_gettime(0x0, 0x0)
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18)
sendfile(r1, r2, 0x0, 0x20000102000007)
sendfile(r2, r0, 0x0, 0x0)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r5 = creat(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./bus\x00'}, 0x10)
close(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3}, 0x14)
readv(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00'})
getdents(r4, 0x0, 0x0)
flistxattr(r4, &(0x7f00000000c0)=""/47, 0x2f)
r6 = socket$netlink(0x10, 0x3, 0xf)
getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

15:38:50 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

15:38:50 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

15:38:50 executing program 5:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x38)
syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

15:38:50 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 1422.633260] binder: BINDER_SET_CONTEXT_MGR already set
[ 1422.633274] binder: 10508:10619 ioctl 40046207 0 returned -16
[ 1422.633396] binder_alloc: 29494: binder_alloc_buf, no vma
15:38:50 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000081100000007bd11a38cfaf4524f6a5385e5e8cda7390d965367f44815e5822d6993c871b3d4"], 0x0, 0x0, 0x0})

[ 1422.633418] binder: 10508:10619 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1422.744509] binder: BINDER_SET_CONTEXT_MGR already set
[ 1422.744520] binder: 10714:10748 ioctl 40046207 0 returned -16
[ 1422.744648] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1422.744672] binder: 10714:10748 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1422.892921] binder: BINDER_SET_CONTEXT_MGR already set
[ 1422.892931] binder: 10775:10814 ioctl 40046207 0 returned -16
[ 1422.893075] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1422.893098] binder: 10775:10814 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1422.950749] binder: BINDER_SET_CONTEXT_MGR already set
[ 1422.950759] binder: 10902:10966 ioctl 40046207 0 returned -16
[ 1422.950876] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1422.950898] binder: 10902:10966 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1423.245931] binder: BINDER_SET_CONTEXT_MGR already set
[ 1423.245942] binder: 11064:11137 ioctl 40046207 0 returned -16
[ 1423.246058] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1423.246082] binder: 11064:11137 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1423.365849] binder: BINDER_SET_CONTEXT_MGR already set
[ 1423.365862] binder: 11252:11275 ioctl 40046207 0 returned -16
[ 1423.366009] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1423.366032] binder: 11252:11275 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1423.422366] binder: BINDER_SET_CONTEXT_MGR already set
[ 1423.422376] binder: 11299:11331 ioctl 40046207 0 returned -16
[ 1423.423244] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1423.423266] binder: 11299:11331 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1423.584572] binder: BINDER_SET_CONTEXT_MGR already set
[ 1423.584583] binder: 11412:11455 ioctl 40046207 0 returned -16
[ 1423.585148] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1423.585172] binder: 11412:11455 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1423.663713] binder: BINDER_SET_CONTEXT_MGR already set
[ 1423.663723] binder: 11546:11592 ioctl 40046207 0 returned -16
[ 1423.663830] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1423.663853] binder: 11546:11592 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1423.835590] binder: BINDER_SET_CONTEXT_MGR already set
[ 1423.835600] binder: 11655:11713 ioctl 40046207 0 returned -16
[ 1423.835728] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1423.835750] binder: 11655:11713 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1423.915470] binder: BINDER_SET_CONTEXT_MGR already set
[ 1423.915481] binder: 11753:11755 ioctl 40046207 0 returned -16
[ 1423.915593] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1423.915618] binder: 11753:11755 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1423.962696] binder: BINDER_SET_CONTEXT_MGR already set
[ 1423.962706] binder: 11777:11804 ioctl 40046207 0 returned -16
[ 1423.962819] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1423.962841] binder: 11777:11804 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1424.105546] binder: BINDER_SET_CONTEXT_MGR already set
[ 1424.105565] binder: 11830:11919 ioctl 40046207 0 returned -16
[ 1424.105692] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1424.105714] binder: 11830:11919 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1424.268218] binder: BINDER_SET_CONTEXT_MGR already set
[ 1424.268227] binder: 11984:12037 ioctl 40046207 0 returned -16
[ 1424.268349] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1424.268373] binder: 11984:12037 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1424.352847] binder: BINDER_SET_CONTEXT_MGR already set
[ 1424.352856] binder: 12135:12146 ioctl 40046207 0 returned -16
[ 1424.352962] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1424.352984] binder: 12135:12146 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1424.512154] binder: BINDER_SET_CONTEXT_MGR already set
[ 1424.512164] binder: 12214:12322 ioctl 40046207 0 returned -16
[ 1424.512271] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1424.512295] binder: 12214:12322 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1424.689205] binder: BINDER_SET_CONTEXT_MGR already set
[ 1424.689214] binder: 12334:12443 ioctl 40046207 0 returned -16
[ 1424.689314] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1424.689335] binder: 12334:12443 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1424.881625] binder: BINDER_SET_CONTEXT_MGR already set
[ 1424.881635] binder: 12558:12586 ioctl 40046207 0 returned -16
[ 1424.897884] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1424.897907] binder: 12558:12586 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1424.979616] binder: BINDER_SET_CONTEXT_MGR already set
[ 1424.979626] binder: 12659:12710 ioctl 40046207 0 returned -16
[ 1424.979741] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1424.979763] binder: 12659:12710 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1425.027114] binder: BINDER_SET_CONTEXT_MGR already set
[ 1425.027124] binder: 12775:12781 ioctl 40046207 0 returned -16
[ 1425.027232] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1425.027254] binder: 12775:12781 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1425.136314] binder: BINDER_SET_CONTEXT_MGR already set
[ 1425.136323] binder: 12810:12853 ioctl 40046207 0 returned -16
[ 1425.136468] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1425.136491] binder: 12810:12853 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1425.184921] binder: BINDER_SET_CONTEXT_MGR already set
[ 1425.184932] binder: 12912:12924 ioctl 40046207 0 returned -16
[ 1425.185040] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1425.185062] binder: 12912:12924 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1425.275546] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1425.275599] binder: 12949:12957 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1425.356965] binder: BINDER_SET_CONTEXT_MGR already set
[ 1425.356974] binder: 13062:13079 ioctl 40046207 0 returned -16
[ 1425.357083] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1425.357106] binder: 13062:13079 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1425.439048] binder: BINDER_SET_CONTEXT_MGR already set
[ 1425.439057] binder: 13111:13169 ioctl 40046207 0 returned -16
[ 1425.439185] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1425.439207] binder: 13111:13169 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1425.619174] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1425.619197] binder: 13237:13259 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1425.916039] binder: BINDER_SET_CONTEXT_MGR already set
[ 1425.916050] binder: 13503:13593 ioctl 40046207 0 returned -16
[ 1425.916184] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1425.916209] binder: 13503:13593 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1426.049363] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.049372] binder: 13673:13711 ioctl 40046207 0 returned -16
[ 1426.049497] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1426.049519] binder: 13673:13711 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1426.170712] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.170723] binder: 13743:13838 ioctl 40046207 0 returned -16
[ 1426.170836] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1426.170860] binder: 13743:13838 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1426.304797] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.304807] binder: 13915:13944 ioctl 40046207 0 returned -16
[ 1426.304921] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1426.304943] binder: 13915:13944 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1426.404698] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.404708] binder: 13980:14023 ioctl 40046207 0 returned -16
[ 1426.404834] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1426.404859] binder: 13980:14023 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1426.576237] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.576250] binder: 14224:14238 ioctl 40046207 0 returned -16
[ 1426.576862] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1426.576886] binder: 14224:14238 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1426.679142] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.679151] binder: 14268:14325 ioctl 40046207 0 returned -16
[ 1426.679258] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1426.679281] binder: 14268:14325 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1426.923134] binder: BINDER_SET_CONTEXT_MGR already set
[ 1426.923144] binder: 14408:14541 ioctl 40046207 0 returned -16
[ 1426.923254] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1426.923277] binder: 14408:14541 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1427.063611] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.063621] binder: 14577:14662 ioctl 40046207 0 returned -16
[ 1427.063814] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1427.063836] binder: 14577:14662 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1427.192845] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.192856] binder: 14727:14748 ioctl 40046207 0 returned -16
[ 1427.193113] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1427.193135] binder: 14727:14748 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1427.284723] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.284733] binder: 14789:14825 ioctl 40046207 0 returned -16
[ 1427.284874] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1427.284896] binder: 14789:14825 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1427.501543] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.501561] binder: 14941:15015 ioctl 40046207 0 returned -16
[ 1427.518234] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1427.518261] binder: 14941:15015 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1427.694867] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.694878] binder: 15061:15190 ioctl 40046207 0 returned -16
[ 1427.695000] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1427.695023] binder: 15061:15190 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1427.733448] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.733458] binder: 15213:15237 ioctl 40046207 0 returned -16
[ 1427.733601] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1427.733625] binder: 15213:15237 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1427.874267] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.874276] binder: 15329:15360 ioctl 40046207 0 returned -16
[ 1427.874468] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1427.874500] binder: 15329:15360 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1427.958083] binder: BINDER_SET_CONTEXT_MGR already set
[ 1427.958093] binder: 15405:15424 ioctl 40046207 0 returned -16
[ 1427.958210] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1427.958234] binder: 15405:15424 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1428.124414] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.124424] binder: 15580:15594 ioctl 40046207 0 returned -16
[ 1428.124543] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1428.124580] binder: 15580:15594 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1428.219711] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.219721] binder: 15627:15656 ioctl 40046207 0 returned -16
[ 1428.219832] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1428.219851] binder: 15627:15656 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1428.314573] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.314583] binder: 15710:15736 ioctl 40046207 0 returned -16
[ 1428.314708] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1428.314731] binder: 15710:15736 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1428.392777] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.392787] binder: 15771:15787 ioctl 40046207 0 returned -16
[ 1428.392896] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1428.392920] binder: 15771:15787 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1428.495884] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.495895] binder: 15838:15898 ioctl 40046207 0 returned -16
[ 1428.496027] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1428.496051] binder: 15838:15898 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1428.566699] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.566709] binder: 15942:15948 ioctl 40046207 0 returned -16
[ 1428.566835] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1428.566858] binder: 15942:15948 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1428.634659] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.634669] binder: 16014:16053 ioctl 40046207 0 returned -16
[ 1428.634916] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1428.634938] binder: 16014:16053 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1428.691810] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.691819] binder: 16130:16158 ioctl 40046207 0 returned -16
[ 1428.691929] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1428.691952] binder: 16130:16158 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1428.784240] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.784250] binder: 16175:16234 ioctl 40046207 0 returned -16
[ 1428.784365] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1428.784387] binder: 16175:16234 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1428.846456] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.846466] binder: 16298:16317 ioctl 40046207 0 returned -16
[ 1428.846665] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1428.846687] binder: 16298:16317 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1428.929353] binder: BINDER_SET_CONTEXT_MGR already set
[ 1428.929363] binder: 16359:16396 ioctl 40046207 0 returned -16
[ 1428.929497] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1428.929521] binder: 16359:16396 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1429.185009] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.185019] binder: 16509:16551 ioctl 40046207 0 returned -16
[ 1429.185137] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1429.185159] binder: 16509:16551 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1429.307320] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.307330] binder: 16740:16815 ioctl 40046207 0 returned -16
[ 1429.307555] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1429.307580] binder: 16740:16815 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1429.473233] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.473243] binder: 16909:16942 ioctl 40046207 0 returned -16
[ 1429.473680] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1429.473703] binder: 16909:16942 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1429.681317] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.681328] binder: 17037:17141 ioctl 40046207 0 returned -16
[ 1429.687273] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1429.687297] binder: 17037:17141 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1429.749487] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.749497] binder: 17175:17181 ioctl 40046207 0 returned -16
[ 1429.749615] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1429.749639] binder: 17175:17181 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1429.987851] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.987861] binder: 17290:17333 ioctl 40046207 0 returned -16
[ 1429.988000] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1429.988088] binder: 17290:17333 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1430.107709] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.107718] binder: 17459:17514 ioctl 40046207 0 returned -16
[ 1430.107894] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1430.107919] binder: 17459:17514 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1430.169106] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.169116] binder: 17537:17564 ioctl 40046207 0 returned -16
[ 1430.169236] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1430.169260] binder: 17537:17564 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1430.249891] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.249900] binder: 17599:17617 ioctl 40046207 0 returned -16
[ 1430.250013] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1430.250034] binder: 17599:17617 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1430.509465] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.509475] binder: 17694:17728 ioctl 40046207 0 returned -16
[ 1430.509606] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1430.509630] binder: 17694:17728 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1430.621066] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.621076] binder: 17792:17811 ioctl 40046207 0 returned -16
[ 1430.621194] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1430.621219] binder: 17792:17811 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1430.760310] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.760321] binder: 17932:17975 ioctl 40046207 0 returned -16
[ 1430.761154] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1430.761174] binder: 17932:17975 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1430.878086] binder: BINDER_SET_CONTEXT_MGR already set
[ 1430.878096] binder: 18011:18080 ioctl 40046207 0 returned -16
[ 1430.878243] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1430.878266] binder: 18011:18080 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1431.045423] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.045433] binder: 18147:18194 ioctl 40046207 0 returned -16
[ 1431.046307] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1431.046331] binder: 18147:18194 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1431.178959] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.178970] binder: 18247:18279 ioctl 40046207 0 returned -16
[ 1431.179085] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1431.179109] binder: 18247:18279 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1431.352843] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.352853] binder: 18441:18483 ioctl 40046207 0 returned -16
[ 1431.352980] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1431.353002] binder: 18441:18483 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1431.474570] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.474580] binder: 18564:18593 ioctl 40046207 0 returned -16
[ 1431.474709] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1431.474732] binder: 18564:18593 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1431.550623] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.550633] binder: 18675:18713 ioctl 40046207 0 returned -16
[ 1431.550772] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1431.550795] binder: 18675:18713 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1431.640343] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.640353] binder: 18761:18784 ioctl 40046207 0 returned -16
[ 1431.640537] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1431.640573] binder: 18761:18784 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1431.730526] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.730537] binder: 18835:18844 ioctl 40046207 0 returned -16
[ 1431.730664] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1431.730688] binder: 18835:18844 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1431.788618] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.788628] binder: 18871:18950 ioctl 40046207 0 returned -16
[ 1431.788757] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1431.788780] binder: 18871:18950 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1431.861054] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.861063] binder: 18999:19029 ioctl 40046207 0 returned -16
[ 1431.861197] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1431.861222] binder: 18999:19029 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1431.907196] binder: BINDER_SET_CONTEXT_MGR already set
[ 1431.907206] binder: 19090:19102 ioctl 40046207 0 returned -16
[ 1431.938947] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1431.938974] binder: 19090:19102 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1432.121609] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.121619] binder: 19169:19226 ioctl 40046207 0 returned -16
[ 1432.121732] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1432.121755] binder: 19169:19226 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1432.271442] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.271452] binder: 19362:19395 ioctl 40046207 0 returned -16
[ 1432.271587] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1432.271610] binder: 19362:19395 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1432.351564] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.351573] binder: 19440:19481 ioctl 40046207 0 returned -16
[ 1432.351692] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1432.351716] binder: 19440:19481 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1432.482188] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.482198] binder: 19546:19610 ioctl 40046207 0 returned -16
[ 1432.482311] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1432.482334] binder: 19546:19610 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1432.541489] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.541499] binder: 19654:19668 ioctl 40046207 0 returned -16
[ 1432.541624] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1432.541647] binder: 19654:19668 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1432.657224] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.657234] binder: 19725:19748 ioctl 40046207 0 returned -16
[ 1432.661923] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1432.661946] binder: 19725:19748 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1432.728229] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.728238] binder: 19810:19819 ioctl 40046207 0 returned -16
[ 1432.728352] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1432.728375] binder: 19810:19819 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1432.835593] binder: BINDER_SET_CONTEXT_MGR already set
[ 1432.835603] binder: 19860:19873 ioctl 40046207 0 returned -16
[ 1432.835745] binder_alloc: 29494: binder_alloc_buf, no vma
[ 1432.835768] binder: 19860:19873 transaction failed 29189/-3, size -1939563849970379251--3120025010557080190 line 3265
[ 1432.891454] INFO: task kworker/u4:3:5648 blocked for more than 140 seconds.
[ 1432.891460]       Not tainted 4.9.184+ #5
[ 1432.891463] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1432.891482] kworker/u4:3    D26176  5648      2 0x80000000
[ 1432.891503] Workqueue: events_unbound fsnotify_mark_destroy_workfn
[ 1432.891517]  0000000000000087 ffff8800b14daf80 ffff8801d034b700 ffff8801db721000
[ 1432.891528]  ffff8801d6d98000 ffff8801db721018 ffff880092c9f730 ffffffff8280a5ce
[ 1432.891539]  0000000000000000 00000000000003b8 0000000000000002 ffff8801db7218f0
[ 1432.891541] Call Trace:
[ 1432.891564]  [<00000000fb837ef2>] ? __schedule+0x6ce/0x1f10
[ 1432.891574]  [<00000000c6a37036>] ? io_schedule_timeout+0x390/0x390
[ 1432.891582]  [<00000000addb70bc>] schedule+0x92/0x1c0
[ 1432.891590]  [<00000000303b0a60>] schedule_timeout+0x766/0xe50
[ 1432.891602]  [<000000006bce1c65>] ? check_preemption_disabled+0x3c/0x200
[ 1432.891609]  [<0000000083afa023>] ? usleep_range+0x140/0x140
[ 1432.891619]  [<0000000061133245>] ? debug_lockdep_rcu_enabled+0x71/0xa0
[ 1432.891628]  [<00000000873e4b09>] ? mark_held_locks+0xb1/0x100
[ 1432.891636]  [<0000000009d808ce>] ? wait_for_common+0xad/0x4d0
[ 1432.891644]  [<000000006b887c45>] ? _raw_spin_unlock_irq+0x28/0x60
[ 1432.891652]  [<000000008a49d608>] ? trace_hardirqs_on_caller+0x385/0x5a0
[ 1432.891660]  [<00000000d31ed4f8>] wait_for_common+0x2c6/0x4d0
[ 1432.891669]  [<000000002774a0f1>] ? out_of_line_wait_on_atomic_t+0x200/0x200
[ 1432.891678]  [<0000000089d954f0>] ? wake_up_q+0xf0/0xf0
[ 1432.891685]  [<000000000faaa4b0>] ? srcu_reschedule+0x82/0x340
[ 1432.891693]  [<000000002117bc78>] ? srcu_advance_batches+0x1e3/0x430
[ 1432.891702]  [<00000000cfbbde0b>] wait_for_completion+0x18/0x20
[ 1432.891709]  [<0000000055db402d>] __synchronize_srcu+0x26d/0x3d0
[ 1432.891717]  [<0000000048e837dd>] ? srcu_advance_batches+0x430/0x430
[ 1432.891725]  [<000000002503a3bd>] ? trace_raw_output_rcu_utilization+0x150/0x150
[ 1432.891734]  [<000000001d9fd7a1>] ? fsnotify_mark_destroy_list+0x80/0x390
[ 1432.891742]  [<000000006d6e97f6>] ? fsnotify_mark_destroy_list+0x104/0x390
[ 1432.891750]  [<00000000d7cbed30>] synchronize_srcu+0x1f/0x40
[ 1432.891758]  [<000000001f536a2a>] fsnotify_mark_destroy_list+0x110/0x390
[ 1432.891766]  [<00000000768e254d>] ? free_object+0x2b0/0x2b0
[ 1432.891774]  [<00000000fd41df05>] ? fsnotify_init_mark+0xa0/0xa0
[ 1432.891782]  [<000000006bce1c65>] ? check_preemption_disabled+0x3c/0x200
[ 1432.891792]  [<000000004374caa1>] fsnotify_mark_destroy_workfn+0xe/0x10
[ 1432.891800]  [<00000000b328c894>] process_one_work+0x88b/0x1600
[ 1432.891807]  [<00000000d973faa5>] ? process_one_work+0x7ce/0x1600
[ 1432.891815]  [<00000000bc56c7e6>] ? pwq_dec_nr_in_flight+0x2e0/0x2e0
[ 1432.891822]  [<000000006b887c45>] ? _raw_spin_unlock_irq+0x28/0x60
[ 1432.891830]  [<000000009e806290>] worker_thread+0x5df/0x11d0
[ 1432.891838]  [<00000000e77b1821>] ? process_one_work+0x1600/0x1600
[ 1432.891845]  [<000000004988cc04>] kthread+0x278/0x310
[ 1432.891854]  [<00000000ce1674af>] ? __this_cpu_preempt_check+0x1d/0x30
[ 1432.891861]  [<0000000068089f0e>] ? kthread_park+0xa0/0xa0
[ 1432.891868]  [<0000000061133245>] ? debug_lockdep_rcu_enabled+0x71/0xa0
[ 1432.891877]  [<00000000793ebb98>] ? _raw_spin_unlock_irq+0x39/0x60
[ 1432.891886]  [<00000000c5df777f>] ? finish_task_switch+0x1e5/0x660
[ 1432.891894]  [<00000000c2c89a56>] ? finish_task_switch+0x1b7/0x660
[ 1432.891901]  [<00000000d8b71bda>] ? __switch_to_asm+0x41/0x70
[ 1432.891908]  [<0000000033c990b8>] ? __switch_to_asm+0x35/0x70
[ 1432.891915]  [<00000000d8b71bda>] ? __switch_to_asm+0x41/0x70
[ 1432.891923]  [<0000000068089f0e>] ? kthread_park+0xa0/0xa0
[ 1432.891930]  [<0000000068089f0e>] ? kthread_park+0xa0/0xa0
[ 1432.891937]  [<00000000b39c7f10>] ret_from_fork+0x5c/0x70
[ 1432.891941] 
[ 1432.891941] Showing all locks held in the system:
[ 1432.891949] 2 locks held by khungtaskd/24:
[ 1432.891967]  #0:  (rcu_read_lock){......}, at: [<0000000038082cfa>] watchdog+0x14b/0xaf0
[ 1432.891983]  #1:  (tasklist_lock){.+.+..}, at: [<0000000056cb2df1>] debug_show_all_locks+0x7f/0x21f
[ 1432.891993] 2 locks held by udevd/587:
[ 1432.892007]  #0:  (&mm->mmap_sem){++++++}, at: [<00000000ce89f207>] vm_mmap_pgoff+0x13d/0x1c0
[ 1432.892023]  #1:  (&anon_vma->rwsem){++++..}, at: [<00000000b4ce63b0>] validate_mm+0xdb/0x5a0
[ 1432.892028] 1 lock held by rsyslogd/1907:
[ 1432.892043]  #0:  (&f->f_pos_lock){+.+.+.}, at: [<00000000664327ec>] __fdget_pos+0xa8/0xd0
[ 1432.892048] 2 locks held by getty/2035:
[ 1432.892060]  #0:  (&tty->ldisc_sem){++++++}, at: [<00000000f4ba5115>] ldsem_down_read+0x33/0x40
[ 1432.892078]  #1:  (&ldata->atomic_read_lock){+.+...}, at: [<00000000506ab620>] n_tty_read+0x1fe/0x1820
[ 1432.893253] 2 locks held by kworker/u4:3/5648:
[ 1432.893269]  #0:  ("events_unbound"){.+.+.+}, at: [<00000000ca258bd3>] process_one_work+0x790/0x1600
[ 1432.893283]  #1:  ((reaper_work).work){+.+...}, at: [<00000000d973faa5>] process_one_work+0x7ce/0x1600
[ 1432.893382] 1 lock held by init/11532:
[ 1432.893396]  #0:  (tty_mutex){+.+.+.}, at: [<00000000d04669af>] tty_open+0x3f9/0xe10
[ 1432.893400] 1 lock held by init/11533:
[ 1432.893413]  #0:  (tty_mutex){+.+.+.}, at: [<00000000d04669af>] tty_open+0x3f9/0xe10
[ 1432.893418] 1 lock held by init/11534:
[ 1432.893431]  #0:  (tty_mutex){+.+.+.}, at: [<00000000d04669af>] tty_open+0x3f9/0xe10
[ 1432.893435] 1 lock held by init/11535:
[ 1432.893448]  #0:  (tty_mutex){+.+.+.}, at: [<00000000d04669af>] tty_open+0x3f9/0xe10
[ 1432.893452] 1 lock held by init/11536:
[ 1432.893466]  #0:  (tty_mutex){+.+.+.}, at: [<00000000d04669af>] tty_open+0x3f9/0xe10
[ 1432.893471] 1 lock held by init/12018:
[ 1432.893485]  #0:  (tty_mutex){+.+.+.}, at: [<00000000d04669af>] tty_open+0x3f9/0xe10
[ 1432.893725] 2 locks held by syz-executor.3/19833:
[ 1432.893743]  #0:  (&evdev->mutex){+.+...}, at: [<00000000053c7db8>] evdev_release+0xf0/0x1b0
[ 1432.893758]  #1:  (&dev->mutex#2){+.+...}, at: [<000000008640dd3b>] input_close_device+0x48/0x140
[ 1432.893761] 
[ 1432.893763] =============================================
[ 1432.893763] 
[ 1432.893767] NMI backtrace for cpu 0
[ 1432.893776] CPU: 0 PID: 24 Comm: khungtaskd Not tainted 4.9.184+ #5
[ 1432.893789]  ffff8801d98efcc8 ffffffff81b580a1 0000000000000000 0000000000000000
[ 1432.893799]  0000000000000000 ffffffff81099a01 dffffc0000000000 ffff8801d98efd00
[ 1432.893810]  ffffffff81b6333c 0000000000000000 0000000000000000 0000000000000000
[ 1432.893811] Call Trace:
[ 1432.893822]  [<000000009c78d1c9>] dump_stack+0xc1/0x120
[ 1432.893832]  [<0000000031043dcf>] ? irq_force_complete_move+0x2e1/0x300
[ 1432.893840]  [<000000007ee3f4be>] nmi_cpu_backtrace.cold+0x47/0x87
[ 1432.893849]  [<00000000734bcc06>] ? irq_force_complete_move+0x300/0x300
[ 1432.893857]  [<00000000ca24873b>] nmi_trigger_cpumask_backtrace+0x124/0x155
[ 1432.893866]  [<000000005c763935>] arch_trigger_cpumask_backtrace+0x14/0x20
[ 1432.893874]  [<0000000037427d62>] watchdog+0x670/0xaf0
[ 1432.893881]  [<0000000038082cfa>] ? watchdog+0x14b/0xaf0
[ 1432.893888]  [<000000008a49d608>] ? trace_hardirqs_on_caller+0x385/0x5a0
[ 1432.893897]  [<00000000c441e799>] ? hungtask_pm_notify+0x60/0x60
[ 1432.893904]  [<000000004988cc04>] kthread+0x278/0x310
[ 1432.893912]  [<0000000068089f0e>] ? kthread_park+0xa0/0xa0
[ 1432.893920]  [<0000000061133245>] ? debug_lockdep_rcu_enabled+0x71/0xa0
[ 1432.893928]  [<00000000793ebb98>] ? _raw_spin_unlock_irq+0x39/0x60
[ 1432.893936]  [<00000000c5df777f>] ? finish_task_switch+0x1e5/0x660
[ 1432.893944]  [<00000000c2c89a56>] ? finish_task_switch+0x1b7/0x660
[ 1432.893951]  [<00000000d8b71bda>] ? __switch_to_asm+0x41/0x70
[ 1432.893958]  [<0000000033c990b8>] ? __switch_to_asm+0x35/0x70
[ 1432.893965]  [<00000000d8b71bda>] ? __switch_to_asm+0x41/0x70
[ 1432.893972]  [<0000000068089f0e>] ? kthread_park+0xa0/0xa0
[ 1432.893980]  [<0000000068089f0e>] ? kthread_park+0xa0/0xa0
[ 1432.893987]  [<00000000b39c7f10>] ret_from_fork+0x5c/0x70
[ 1432.893993] Sending NMI from CPU 0 to CPUs 1:
[ 1432.895011] NMI backtrace for cpu 1
[ 1432.895015] CPU: 1 PID: 2351 Comm: kworker/1:2 Not tainted 4.9.184+ #5
[ 1432.895018] Workqueue: events binder_deferred_func
c
[ 1432.895021] task: 00000000798c08bc task.stack: 0000000086ffd91f
[ 1432.895025] RIP: 0010:[<ffffffff81d77c2b>] 
c [<00000000b24b3ef9>] io_serial_in+0x6b/0x90
[ 1432.895028] RSP: 0018:ffff8801a58b7648  EFLAGS: 00000002
[ 1432.895032] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000
[ 1432.895035] RDX: 00000000000003fd RSI: ffffffff81d77bd1 RDI: ffffffff84b65d18
[ 1432.895039] RBP: ffff8801a58b7658 R08: 0000000000000001 R09: 0000000000000000
[ 1432.895043] R10: 0000000000000001 R11: ffffffff841d4578 R12: ffffffff84b65ce0
[ 1432.895046] R13: 0000000000000020 R14: fffffbfff096cbe3 R15: fffffbfff096cba5
[ 1432.895050] FS:  0000000000000000(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000
[ 1432.895053] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1432.895057] CR2: 00007ffd3648e0b8 CR3: 00000001d011a000 CR4: 00000000001606b0
[ 1432.895059] Stack:
[ 1432.895063]  ffffffff84b65ce0
c 0000000000002707
c ffff8801a58b76a8
c ffffffff81d79e74
c
[ 1432.895067]  ffffffff841d4540
c ffffffff84b65d28
c ffffffff84b65f1a
c ffffffff841d4568
c
[ 1432.895071]  ffffffff84b65ce0
c 0000000000000058
c dffffc0000000000
c 0000000000000058
c
[ 1432.895073] Call Trace:
[ 1432.895076]  [<00000000a3f4a200>] wait_for_xmitr+0x94/0x1e0
[ 1432.895079]  [<0000000056485c15>] serial8250_console_putchar+0x20/0x60
[ 1432.895082]  [<0000000034d7468f>] ? wait_for_xmitr+0x1e0/0x1e0
[ 1432.895086]  [<0000000066b5e0ff>] uart_console_write+0x56/0xe0
[ 1432.895089]  [<00000000f6839469>] serial8250_console_write+0x2fb/0x860
[ 1432.895093]  [<000000005aff339a>] ? serial8250_release_port+0x20/0x20
[ 1432.895096]  [<00000000e85942ae>] ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1432.895099]  [<00000000d90fef94>] ? univ8250_console_setup+0x140/0x140
[ 1432.895102]  [<00000000757100ae>] univ8250_console_write+0x5f/0x70
[ 1432.895106]  [<000000007e6c8f4a>] call_console_drivers.isra.0.constprop.0+0x1ac/0x360
[ 1432.895109]  [<00000000522e0281>] console_unlock+0x47c/0xb20
[ 1432.895112]  [<000000007a4e826a>] vprintk_emit+0x43f/0x6f0
[ 1432.895115]  [<000000005cb8c85b>] vprintk+0x28/0x30
[ 1432.895117]  [<00000000dc96fb4b>] printk+0xc2/0xf5
[ 1432.895121]  [<000000001381ebfd>] ? log_wakeup_reason.cold+0x145/0x145
[ 1432.895124]  [<000000007a0ccabe>] ? _binder_inner_proc_unlock+0x30/0x40
[ 1432.895127]  [<00000000620bd59c>] binder_release_work.cold+0x78/0x9d
[ 1432.895131]  [<0000000006b2b5d8>] binder_thread_release+0x42e/0x530
[ 1432.895134]  [<000000004acf2d79>] ? _raw_spin_unlock+0x2d/0x50
[ 1432.895137]  [<00000000783eb9e9>] binder_deferred_func+0x499/0xde0
[ 1432.895141]  [<000000006bce1c65>] ? check_preemption_disabled+0x3c/0x200
[ 1432.895144]  [<000000006bce1c65>] ? check_preemption_disabled+0x3c/0x200
[ 1432.895147]  [<00000000b328c894>] process_one_work+0x88b/0x1600
[ 1432.895151]  [<00000000d973faa5>] ? process_one_work+0x7ce/0x1600
[ 1432.895154]  [<00000000bc56c7e6>] ? pwq_dec_nr_in_flight+0x2e0/0x2e0
[ 1432.895157]  [<000000006b887c45>] ? _raw_spin_unlock_irq+0x28/0x60
[ 1432.895161]  [<000000009e806290>] worker_thread+0x5df/0x11d0
[ 1432.895164]  [<00000000e77b1821>] ? process_one_work+0x1600/0x1600
[ 1432.895167]  [<000000004988cc04>] kthread+0x278/0x310
[ 1432.895170]  [<00000000387b04f7>] ? trace_hardirqs_on+0xd/0x10
[ 1432.895173]  [<0000000068089f0e>] ? kthread_park+0xa0/0xa0
[ 1432.895176]  [<0000000061133245>] ? debug_lockdep_rcu_enabled+0x71/0xa0
[ 1432.895180]  [<0000000020d1bdcc>] ? finish_task_switch+0x42a/0x660
[ 1432.895183]  [<00000000c2c89a56>] ? finish_task_switch+0x1b7/0x660
[ 1432.895186]  [<00000000d8b71bda>] ? __switch_to_asm+0x41/0x70
[ 1432.895189]  [<0000000033c990b8>] ? __switch_to_asm+0x35/0x70
[ 1432.895192]  [<00000000d8b71bda>] ? __switch_to_asm+0x41/0x70
[ 1432.895195]  [<0000000068089f0e>] ? kthread_park+0xa0/0xa0
[ 1432.895198]  [<0000000068089f0e>] ? kthread_park+0xa0/0xa0
[ 1432.895201]  [<00000000b39c7f10>] ret_from_fork+0x5c/0x70
[ 1432.895212] Code: 
c24 
cc9 
c00 
c00 
c00 
c49 
c8d 
c7c 
c24 
c38 
c48 
cb8 
c00 
c00 
c00 
c00 
c00 
cfc 
cff 
cdf 
c48 
c89 
cfa 
c48 
cc1 
cea 
c03 
cd3 
ce3 
c80 
c3c 
c02 
c00 
c75 
c17 
c41 
c03 
c5c 
c24 
c38 
c89 
cda 
cec 
c<5b> 
c0f 
cb6 
cc0 
c41 
c5c 
c5d 
cc3 
ce8 
c38 
c53 
c78 
cff 
ceb 
cc2 
ce8 
c91 
c53 
c78 
cff 
ceb 
c
[ 1432.895218] Kernel panic - not syncing: hung_task: blocked tasks
[ 1432.895225] CPU: 0 PID: 24 Comm: khungtaskd Not tainted 4.9.184+ #5
[ 1432.895237]  ffff8801d98efc60 ffffffff81b580a1 ffff8800b14daf00 ffffffff82a7abc0
[ 1432.895249]  00000000ffffffff 0000000000000000 dffffc0000000000 ffff8801d98efd40
[ 1432.895259]  ffffffff813fd67a 0000000041b58ab3 ffffffff82e313da ffffffff813fd4a1
[ 1432.895261] Call Trace:
[ 1432.895269]  [<000000009c78d1c9>] dump_stack+0xc1/0x120
[ 1432.895277]  [<00000000fecc5636>] panic+0x1d9/0x3bd
[ 1432.895285]  [<00000000fb45427e>] ? add_taint.cold+0x16/0x16
[ 1432.895292]  [<00000000f2956510>] ? find_next_bit+0x44/0x50
[ 1432.895300]  [<00000000ed2fe0ec>] ? printk_nmi_flush+0xae/0xd0
[ 1432.895309]  [<00000000734bcc06>] ? irq_force_complete_move+0x300/0x300
[ 1432.895317]  [<0000000025441308>] ? nmi_trigger_cpumask_backtrace+0xfc/0x155
[ 1432.895324]  [<00000000adc49dc6>] watchdog+0x681/0xaf0
[ 1432.895331]  [<0000000038082cfa>] ? watchdog+0x14b/0xaf0
[ 1432.895339]  [<000000008a49d608>] ? trace_hardirqs_on_caller+0x385/0x5a0
[ 1432.895347]  [<00000000c441e799>] ? hungtask_pm_notify+0x60/0x60
[ 1432.895355]  [<000000004988cc04>] kthread+0x278/0x310
[ 1432.895363]  [<0000000068089f0e>] ? kthread_park+0xa0/0xa0
[ 1432.895370]  [<0000000061133245>] ? debug_lockdep_rcu_enabled+0x71/0xa0
[ 1432.895379]  [<00000000793ebb98>] ? _raw_spin_unlock_irq+0x39/0x60
[ 1432.895387]  [<00000000c5df777f>] ? finish_task_switch+0x1e5/0x660
[ 1432.895395]  [<00000000c2c89a56>] ? finish_task_switch+0x1b7/0x660
[ 1432.895402]  [<00000000d8b71bda>] ? __switch_to_asm+0x41/0x70
[ 1432.895409]  [<0000000033c990b8>] ? __switch_to_asm+0x35/0x70
[ 1432.895416]  [<00000000d8b71bda>] ? __switch_to_asm+0x41/0x70
[ 1432.895424]  [<0000000068089f0e>] ? kthread_park+0xa0/0xa0
[ 1432.895432]  [<0000000068089f0e>] ? kthread_park+0xa0/0xa0
[ 1432.895439]  [<00000000b39c7f10>] ret_from_fork+0x5c/0x70
[ 1432.896607] Kernel Offset: disabled