at$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x2]}], 0x3}}}) 13:56:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x1000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1306.709393] binder: 22539:22549 ioctl c0306201 20000140 returned -22 [ 1306.714257] binder: 22550:22552 ioctl c018620b 0 returned -14 [ 1306.747722] binder: 22539:22554 unknown command 1077961684 [ 1306.811011] binder: 22539:22554 ioctl c0306201 20000140 returned -22 [ 1306.819469] binder: 22550:22552 ioctl c018620b 0 returned -14 13:56:49 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063d5}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:49 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x4]}], 0x3}}}) 13:56:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x12000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:56:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:56:49 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x701000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x5, 0x3, 0xff, 0x1, 0x81, 0x7}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1307.050164] binder: 22572:22580 unknown command 1077961685 [ 1307.085615] binder: 22572:22580 ioctl c0306201 20000140 returned -22 [ 1307.088647] binder: 22579:22584 ioctl c018620b 0 returned -14 13:56:50 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x1000000]}], 0x3}}}) 13:56:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x3f000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:56:50 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x800000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:50 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x4001, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1307.119254] binder: 22572:22588 unknown command 1077961685 [ 1307.147533] binder: 22572:22588 ioctl c0306201 20000140 returned -22 13:56:50 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063d6}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x60000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:56:50 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x2000000]}], 0x3}}}) 13:56:50 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x801000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="d2b1b19d"], &(0x7f0000000380)=0xc) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000003c0)={r2, 0xa8, 0x80, 0x8}, 0x10) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=@fragment={0x3f, 0x0, 0x7, 0x3, 0x0, 0x0, 0x66}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e20, 0x800, @local, 0x8}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x5}, &(0x7f00000002c0)=0xa6) ptrace$getenv(0x4201, r3, 0x7, &(0x7f0000000080)) [ 1307.417572] binder: 22606:22610 unknown command 1077961686 [ 1307.447800] binder: 22606:22610 ioctl c0306201 20000140 returned -22 [ 1307.467620] binder_alloc_new_buf_locked: 24 callbacks suppressed [ 1307.467631] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1307.483832] binder: 22606:22618 unknown command 1077961686 [ 1307.498804] binder_alloc_new_buf_locked: 24 callbacks suppressed [ 1307.498819] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1307.526892] binder: 22606:22618 ioctl c0306201 20000140 returned -22 [ 1307.592269] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1307.600547] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1307.627005] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1307.637232] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:56:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x1200}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:56:50 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x4000000]}], 0x3}}}) 13:56:50 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x900000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:50 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063d7}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0xfdfdffff}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:56:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x404200, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1307.885357] binder: 22579:22584 ioctl c018620b 0 returned -14 [ 1307.886181] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1307.899154] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1307.962155] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1307.997195] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1308.006557] binder: 22631:22641 unknown command 1077961687 13:56:51 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x100000000000000]}], 0x3}}}) 13:56:51 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x901000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1308.027173] binder: 22631:22641 ioctl c0306201 20000140 returned -22 [ 1308.034064] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1308.049045] binder: 22640:22642 ioctl c018620b 0 returned -14 [ 1308.050386] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1308.074827] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space 13:56:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0xfffffdfd}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:56:51 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063d8}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1308.111070] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1308.151203] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space 13:56:51 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xa00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1308.181299] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:56:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xfffffffffffffe99, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000233e00000000000075ab506abfe6311c0000000000b3e8f45c38113e8aa193f87c403b000000000000000000004800", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 1308.250099] binder: 22640:22642 ioctl c018620b 0 returned -14 [ 1308.266418] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space 13:56:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x2000}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:56:51 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x200000000000000]}], 0x3}}}) [ 1308.292498] binder: 22656:22658 unknown command 1077961688 [ 1308.312354] binder: 22656:22658 ioctl c0306201 20000140 returned -22 [ 1308.319072] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:56:51 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xa01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x100000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1308.392067] binder: 22656:22667 unknown command 1077961688 13:56:51 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x400000000000000]}], 0x3}}}) 13:56:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1308.452353] binder: 22656:22667 ioctl c0306201 20000140 returned -22 [ 1308.478183] binder: 22672:22675 ioctl c018620b 0 returned -14 13:56:51 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063d9}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:51 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xb00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1308.563925] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1308.581377] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:56:51 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x2]}], 0x3}}}) 13:56:51 executing program 2: setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000040)='./file0\x00', 0xf33d, 0x2, &(0x7f0000000140)=[{&(0x7f0000000080)="d1fb8092234b4ab634a4dce4e725555d9505e2b7301c03b819b0836e0787cbecf2bc5a246cc2a0ef3d489bcbddcc8b352b49b52f5e01e10e5621ebcca424ada834c3f05ed35f0cf044b63185", 0x4c, 0x7}, {&(0x7f0000000100), 0x0, 0x1}], 0x200040, &(0x7f0000000180)='/dev/binder#\x00') r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xb9, 0x0, &(0x7f00000002c0)="3695c6b5b97dd05758dcab1d934251bd828b85b603dec865353906fc3baa3d68315bf5da26869ad41b69c0a2d60372539c9e1998730cf38cab88bd7a60475c8fa42f8510e7e356971d72b728342c685621f07e3ec77b7bd9914319d38b9006ab5765d72649359daffae7ab66af55227922486567cacbd42f0a43687f4e68ff660fb611541308ef38711a2badea0fb2a9faf4a615bb14bd5b4170a2999cd4dff05587f8db123df6e7b51dcca4824657e8889227b3faf2ad7b90"}) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x2c6, 0x0, &(0x7f0000000080), 0x1f6, 0x0, 0x0}) 13:56:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x1200000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:56:51 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xb01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1308.684760] binder: 22690:22692 unknown command 1077961689 [ 1308.709798] binder: 22690:22692 ioctl c0306201 20000140 returned -22 [ 1308.754450] binder: 22690:22695 unknown command 1077961689 [ 1308.795979] binder: 22690:22695 ioctl c0306201 20000140 returned -22 [ 1308.880291] binder: 22700:22710 unknown command -1837040687 [ 1308.910269] binder: 22700:22710 ioctl c0306201 20000440 returned -22 13:56:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x1000000}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:56:52 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063da}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:52 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xc00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x3f00000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:56:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x4ea201, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xeb0a, 0x3ff}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000140)=r2, 0x4) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x63, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) memfd_create(&(0x7f0000000040)='em0cpuset.security:user$\x00', 0x7) 13:56:52 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x4]}], 0x3}}}) [ 1309.248923] binder: 22672:22675 ioctl c018620b 0 returned -14 13:56:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x6000000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1309.346024] binder: 22720:22731 unknown command 1077961690 [ 1309.359337] binder: 22720:22731 ioctl c0306201 20000140 returned -22 13:56:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L-', 0xbd82}, 0x28, 0x2) [ 1309.390650] binder: 22720:22735 unknown command 1077961690 [ 1309.407182] binder: 22733:22734 ioctl c018620b 0 returned -14 13:56:52 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x1000000]}], 0x3}}}) 13:56:52 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xc01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1309.432162] binder: 22720:22735 ioctl c0306201 20000140 returned -22 13:56:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x12000000}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:56:52 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063db}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0xfdfdffff00000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:56:52 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000480)={0x6, 0x3, 0x8001, 'queue0\x00', 0x3f}) setsockopt$inet_buf(r0, 0x0, 0x37, &(0x7f0000000100)="c08c19d3fd40f422ccbb45cde1eea5b34e426744e10751a44667decb46ef88784f867ffaed3db45b85fb2bd2e031f5a068ac4321da41f1f394bc1eddb85b3acc7957234cb553485112b2306d795c6b798493c6c9fbb5da2d31940f46178064030bb274674abbafad50f4cb82e4647fea5efd39e778a08f4d17c018726b0ce7499f9bd637eb4885bd2b72c4386e48c7bb27f7659971154e7ee208ece18f7ac3dab2a24779aabba5157a4b260a1f", 0xad) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f00000000c0)) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000020000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a62730000f7ff00"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 13:56:52 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x2000000]}], 0x3}}}) 13:56:52 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xd00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1309.687069] binder: 22755:22758 ioctl c018620b 0 returned -14 [ 1309.688174] binder: 22754:22759 unknown command 1077961691 13:56:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1309.768987] binder: 22754:22759 ioctl c0306201 20000140 returned -22 [ 1309.796990] binder: 22754:22769 unknown command 1077961691 13:56:52 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x4000000]}], 0x3}}}) 13:56:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00634040000000000000009d9a0000000000000000000000000000000000000000000000480000004673000018000000000000008120bfa4053501c8da506dcddcea060d9f7e6366b59dc09f5d9ee87e80901479a0fdb3f7f43d900db19c6966f8b1edd9140aa9921f9592ec9b6ce17238cf4490a96b341864ae2655cb98c5659e1e4c2abca569ad98093654b61f545003734a364c47", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 1309.846609] binder: 22754:22769 ioctl c0306201 20000140 returned -22 13:56:52 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063dc}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:53 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xd01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x60}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1310.114231] binder: 22787:22791 unknown command 1077961692 [ 1310.121511] binder: 22787:22791 ioctl c0306201 20000140 returned -22 [ 1310.159110] binder: 22787:22795 unknown command 1077961692 [ 1310.170967] binder: 22787:22795 ioctl c0306201 20000140 returned -22 13:56:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x20000000}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:56:53 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x100000000000000]}], 0x3}}}) 13:56:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_mcast\x00') write$selinux_access(r1, &(0x7f0000000040)={'system_u:object_r:usr_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x20}, 0x47) 13:56:53 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xe00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x1200}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:56:53 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063dd}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1310.469448] binder: 22755:22758 ioctl c018620b 0 returned -14 13:56:53 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x200000000000000]}], 0x3}}}) 13:56:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x3f00}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:56:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) sched_rr_get_interval(r1, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000ef620500000034fc6a1e692585000000000000000000000000000048000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018e70000000000003000000000000000"]], 0x0, 0x0, 0x0}) rt_sigtimedwait(&(0x7f00000000c0)={0x7}, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x8) [ 1310.565627] binder: 22800:22807 unknown command 1077961693 [ 1310.591232] binder: 22806:22813 ioctl c018620b 0 returned -14 [ 1310.593889] binder: 22800:22807 ioctl c0306201 20000140 returned -22 13:56:53 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xe01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:53 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063de}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:53 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x400000000000000]}], 0x3}}}) [ 1310.900941] binder: 22833:22836 unknown command 1077961694 [ 1310.923297] binder: 22833:22836 ioctl c0306201 20000140 returned -22 [ 1310.947910] binder: 22833:22839 unknown command 1077961694 [ 1310.961890] binder: 22833:22839 ioctl c0306201 20000140 returned -22 [ 1311.384083] binder: 22806:22813 ioctl c018620b 0 returned -14 13:56:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0xfdfdffff}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:56:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x6000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:56:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x803) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) 13:56:54 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x2]}], 0x3}}}) 13:56:54 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xf00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:54 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063df}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1311.519511] binder: 22845:22851 unknown command 1077961695 [ 1311.545331] binder: 22845:22851 ioctl c0306201 20000140 returned -22 [ 1311.564061] binder: 22850:22856 ioctl c018620b 0 returned -14 13:56:54 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x4]}], 0x3}}}) 13:56:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x20) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:56:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x1000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:56:54 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xf01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:54 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063e0}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1311.586585] binder: 22845:22857 unknown command 1077961695 [ 1311.592704] binder: 22845:22857 ioctl c0306201 20000140 returned -22 13:56:54 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x1000000]}], 0x3}}}) [ 1311.740678] binder: 22865:22872 unknown command 1077961696 [ 1311.764676] binder: 22865:22872 ioctl c0306201 20000140 returned -22 [ 1311.792700] binder: 22865:22876 unknown command 1077961696 [ 1311.822929] binder: 22865:22876 ioctl c0306201 20000140 returned -22 13:56:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0xfffffdfd}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:56:55 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1000000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000ff0300000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x90300, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x10000, 0x0) 13:56:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x12000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:56:55 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063e1}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:55 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x2000000]}], 0x3}}}) [ 1312.344227] binder: 22850:22856 ioctl c018620b 0 returned -14 [ 1312.428324] binder: 22888:22894 unknown command 1077961697 13:56:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x8, 0x2000000008000) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x49) write$P9_RMKDIR(r2, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x8, 0x1, 0x5}}, 0x14) 13:56:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x3f000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:56:55 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x4000000]}], 0x3}}}) [ 1312.480170] binder: 22888:22894 ioctl c0306201 20000140 returned -22 [ 1312.490127] binder: 22895:22899 ioctl c018620b 0 returned -14 [ 1312.504928] binder: 22888:22900 unknown command 1077961697 [ 1312.516217] binder: 22888:22900 ioctl c0306201 20000140 returned -22 13:56:55 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1001000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1312.563189] binder_alloc_new_buf_locked: 31 callbacks suppressed [ 1312.563202] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space 13:56:55 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063e2}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:55 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x100000000000000]}], 0x3}}}) [ 1312.651888] binder_alloc_new_buf_locked: 31 callbacks suppressed [ 1312.651907] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1312.668864] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1312.688604] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1312.723428] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1312.753309] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1312.780926] binder: 22916:22922 unknown command 1077961698 [ 1312.802358] binder: 22916:22922 ioctl c0306201 20000140 returned -22 [ 1312.884178] binder: 22916:22927 unknown command 1077961698 [ 1312.896559] binder: 22916:22927 ioctl c0306201 20000140 returned -22 13:56:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x100000000000000}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:56:56 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1100000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000001b0000b400000000000000000000000000000048000000000000001800000000000800", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 13:56:56 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x200000000000000]}], 0x3}}}) 13:56:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x60000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:56:56 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063e3}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1313.285603] binder: 22895:22899 ioctl c018620b 0 returned -14 [ 1313.286814] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1313.299325] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1313.387681] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1313.389457] binder: 22932:22937 unknown command 1077961699 [ 1313.406800] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1313.427517] binder: 22932:22937 ioctl c0306201 20000140 returned -22 13:56:56 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x400000000000000]}], 0x3}}}) [ 1313.427945] binder: 22935:22941 ioctl c018620b 0 returned -14 [ 1313.447756] binder_alloc: 13562: binder_alloc_buf size 2251799813685344 failed, no address space 13:56:56 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1101000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0xfdfdffff}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1313.485625] binder: 22932:22945 unknown command 1077961699 [ 1313.516782] binder: 22932:22945 ioctl c0306201 20000140 returned -22 [ 1313.532617] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1313.556530] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space 13:56:56 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063e4}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:56 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x2]}], 0x3}}}) 13:56:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[@request_death={0x400c630e, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/180, 0x0, 0x1, 0x29}, @fda={0x66646185, 0x7, 0x2, 0x8}, @fda={0x66646185, 0x9, 0x1, 0x5}}, &(0x7f00000001c0)}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={@flat=@weak_handle, @fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x101, 0x3}}, &(0x7f0000000380)}, 0x1040}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x100}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}}, &(0x7f00000003c0)}}, @register_looper, @request_death, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x774886f30c3405e5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x0, 0x22}, @fda={0x66646185, 0x2, 0x1, 0x20}}, &(0x7f0000000580)}, 0x400}, @clear_death={0x400c630f, 0x1}, @acquire], 0xfffffffffffffe24, 0x0, 0x0}) [ 1313.604364] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1313.708323] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1313.738810] binder: 22956:22963 unknown command 1077961700 [ 1313.748677] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1313.755360] binder: 22956:22963 ioctl c0306201 20000140 returned -22 [ 1313.767058] binder: 22960:22965 ioctl c0306201 20000000 returned -14 [ 1313.810678] binder: 22956:22967 unknown command 1077961700 [ 1313.834443] binder: 22956:22967 ioctl c0306201 20000140 returned -22 13:56:57 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}], 0x3}}}) 13:56:57 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1200000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x1200000000000000}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:56:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x410440}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_NET={0x64, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd38}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffa878}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6036}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) 13:56:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0xfffffdfd}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:56:57 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063e5}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1314.218288] binder: 22935:22941 ioctl c018620b 0 returned -14 [ 1314.221221] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1314.232147] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1314.320171] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1314.346526] binder: 22974:22984 unknown command 1077961701 [ 1314.349248] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:56:57 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1201000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:57 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000]}], 0x3}}}) 13:56:57 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x3, 0x501000) fsetxattr$security_selinux(r0, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:etc_runtime_t:s0\x00', 0x23, 0x1) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="00000000000018000000000000003000000000000000dc98e33a7bb0f3cd9d0a8b00727279e10843cf1616be1e002efbb4d83c8135bae84502ae7926951c0fcce289e21936eaa9837af10fe1fe82eee2a6f3e4a5676a9b51d8b74529e7f96a5448a1291bcc30db259939d01db27f973e0721036b6ae666ca22ffc571fab0db12299e36"]], 0x0, 0x0, 0x0}) [ 1314.387363] binder: 22974:22984 ioctl c0306201 20000140 returned -22 [ 1314.397598] binder: 22982:22986 ioctl c018620b 0 returned -14 [ 1314.428668] binder: 22974:22989 unknown command 1077961701 13:56:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x100000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1314.486954] binder: 22982:22986 ioctl c018620b 0 returned -14 [ 1314.502671] binder: 22974:22989 ioctl c0306201 20000140 returned -22 13:56:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x2000000000000000}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:56:57 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x2000000]}], 0x3}}}) 13:56:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000163a27f07090f632641322acba196ed41ab2ddda002545a43545240644a207a0cd5f9a03458fb3b0fe7c5af605381b3ce9813f350ffd7298edd4cf1a176165c963e00e15a8975860bcb9118a151be60154e04c9277c7"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 13:56:57 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063e6}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:57 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1300000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x1200000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1314.727357] binder: 23008:23013 ioctl c018620b 0 returned -14 [ 1314.766769] binder: 23011:23016 unknown command 1077961702 13:56:57 executing program 2: mount$9p_virtio(&(0x7f00000000c0)='/dev/binder#\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x800004, &(0x7f0000000180)={'trans=virtio,', {[{@access_client='access=client'}], [{@seclabel='seclabel'}, {@dont_hash='dont_hash'}, {@smackfstransmute={'smackfstransmute'}}, {@subj_role={'subj_role', 0x3d, '/dev/binder#\x00'}}, {@obj_type={'obj_type', 0x3d, '/dev/binder#\x00'}}]}}) r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffc67, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000000000000013dfb1fa889cfa9c2907337db359d084e3a78b98e79b510256343797e1fdd34696fe", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 13:56:57 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x4000000]}], 0x3}}}) [ 1314.797438] binder: 23011:23016 ioctl c0306201 20000140 returned -22 13:56:57 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1301000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1314.854332] binder: 23011:23025 unknown command 1077961702 [ 1314.860029] binder: 23011:23025 ioctl c0306201 20000140 returned -22 13:56:57 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063e7}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x3f00000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:56:58 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x100000000000000]}], 0x3}}}) [ 1315.118440] binder: 23037:23042 unknown command 1077961703 [ 1315.146666] binder: 23037:23042 ioctl c0306201 20000140 returned -22 [ 1315.164603] binder: 23037:23046 unknown command 1077961703 [ 1315.176149] binder: 23037:23046 ioctl c0306201 20000140 returned -22 [ 1315.521137] binder: 23008:23013 ioctl c018620b 0 returned -14 13:56:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0xfdfdffff00000000}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:56:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x804) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000300)=[@register_looper], 0x0, 0x0, 0x0}) 13:56:58 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1400000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x6000000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:56:58 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063e8}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:58 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x200000000000000]}], 0x3}}}) 13:56:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/208, 0xd0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0xfffffffffffffe95, 0x0, 0x0}) 13:56:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0xfdfdffff00000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1315.654492] binder: 23053:23061 unknown command 1077961704 [ 1315.680650] binder: 23053:23061 ioctl c0306201 20000140 returned -22 13:56:58 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x400000000000000]}], 0x3}}}) 13:56:58 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1401000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1315.710732] binder: 23059:23064 ioctl c018620b 0 returned -14 [ 1315.714678] binder: 23053:23065 unknown command 1077961704 [ 1315.746885] binder: 23053:23065 ioctl c0306201 20000140 returned -22 13:56:58 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063e9}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1315.814255] binder: 23067:23073 ioctl c0306201 20000440 returned -14 [ 1315.853189] binder: 23067:23077 ioctl c0306201 20000440 returned -14 13:56:58 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}], 0x3}}}) [ 1315.971974] binder: 23082:23085 unknown command 1077961705 [ 1316.001036] binder: 23082:23085 ioctl c0306201 20000140 returned -22 [ 1316.044710] binder: 23082:23091 unknown command 1077961705 [ 1316.053763] binder: 23082:23091 ioctl c0306201 20000140 returned -22 13:56:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x12}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:56:59 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1500000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:59 executing program 2: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00'}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x2}, 0x0, 0xd92}, 0x0, 0x0, r0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004680)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback, 0x6a}, 0x1c, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000001ac0)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000001dc0)=[@dstopts={{0x30, 0x29, 0x37, {0x0, 0x2, [], [@enc_lim, @pad1, @jumbo={0xc2, 0x4, 0xfffffffffffffbff}, @enc_lim, @ra]}}}, @hopopts={{0x18}}, @hopopts={{0x28, 0x29, 0x36, {0x73, 0x1, [], [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}]}}}], 0x70}}, {{0x0, 0x0, 0x0}}], 0x4, 0x8800) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200, 0x0) getsockopt$inet6_dccp_int(r2, 0x21, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040000000000005eaba21798cd31d459ba7d0d271000000000000000000000000000000003200004800"/53, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 13:56:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:56:59 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}], 0x3}}}) 13:56:59 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063ea}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1316.493788] binder: 23059:23071 ioctl c018620b 0 returned -14 13:56:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x60}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1316.589708] binder: 23096:23105 unknown command 1077961706 [ 1316.612962] binder: 23096:23105 ioctl c0306201 20000140 returned -22 13:56:59 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}], 0x3}}}) 13:56:59 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063eb}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1316.741053] binder: 23106:23111 ioctl c018620b 0 returned -14 13:56:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x1200}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:56:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) socket$xdp(0x2c, 0x3, 0x0) 13:56:59 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1501000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:56:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x1200}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:00 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}], 0x3}}}) [ 1316.920493] binder: 23121:23129 unknown command 1077961707 [ 1316.928560] binder: 23121:23129 ioctl c0306201 20000140 returned -22 [ 1316.939951] binder: 23124:23131 ioctl c018620b 0 returned -14 13:57:00 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1600000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0xfffffffffffffc39, 0x0, 0x0}) [ 1316.994768] binder: 23121:23137 unknown command 1077961707 [ 1317.018737] binder: 23121:23137 ioctl c0306201 20000140 returned -22 13:57:00 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063ec}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x3f00}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1317.137671] binder: 23145:23149 ioctl c0306201 20000440 returned -14 13:57:00 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2f85, 0x400000) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0x6) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0xffffffffffffffb6, 0x0, 0x0}) 13:57:00 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000]}], 0x3}}}) 13:57:00 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1601000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1317.187033] binder: 23151:23152 unknown command 1077961708 [ 1317.195685] binder: 23151:23152 ioctl c0306201 20000140 returned -22 [ 1317.217441] binder: 23151:23154 unknown command 1077961708 [ 1317.248664] binder: 23151:23154 ioctl c0306201 20000140 returned -22 [ 1317.356932] binder: 23161:23164 ioctl c0306201 20000040 returned -14 13:57:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x2000}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:00 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063ed}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x6000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000180000000000000030000000000000002acb0cd806db0ad0de509958752fee4fe9913b35df329d6886a7a23180206cdbf1cdaa8130d6c25f1df9716e9143cb203e5249f5efda1e54024bc609902722c9e5c46e"]], 0x0, 0x0, 0x0}) 13:57:00 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}], 0x3}}}) 13:57:00 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1700000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1317.739082] binder: 23124:23131 ioctl c018620b 0 returned -14 [ 1317.745064] binder_alloc_new_buf_locked: 25 callbacks suppressed [ 1317.745074] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1317.759092] binder_alloc_new_buf_locked: 25 callbacks suppressed [ 1317.759109] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1317.827622] binder: 23174:23179 unknown command 1077961709 [ 1317.845141] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1317.854482] binder: 23174:23179 ioctl c0306201 20000140 returned -22 [ 1317.878943] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1317.890612] binder: 23174:23186 unknown command 1077961709 [ 1317.905417] binder: 23174:23186 ioctl c0306201 20000140 returned -22 [ 1317.912283] binder: 23182:23187 ioctl c018620b 0 returned -14 13:57:00 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}], 0x3}}}) 13:57:00 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1701000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:01 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063ee}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1317.922146] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1317.936902] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1317.969006] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space 13:57:01 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0xa58e277c1bd62e7d) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000000280)=[@clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000140)={@fda={0x66646185, 0x4, 0x1, 0x22}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/91, 0x5b, 0x2, 0x5}}, 0xfffffffffffffffe}, 0x1000}], 0xcb, 0x0, &(0x7f0000000480)="e38b209be179337d02c942ebf42b639758104ef3d19a7b84709f8deae27ca4aac96649c94a9ce0d7a15065fb529d6003bd0dbb1d2aa525d8a24854d17e157f0eea34fb0cf31050323b6f365f6d2d5ace4fc2f5d20314d35f433ccf6ab702ed8a131d2223db0149bfe398f123a23f5b8853e98e4a9d2f65d7625a47b94b74c4c57b62013c268f8ceee487331eb740d0207455f1d5994838971ec70974a188ac70a36b6b4d4e176b28aec3bdbf51743bebace002fe30c9be49d48b4e269f54952faa29f4bd5b6e6d04ec4e53"}) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x1000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:01 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1800000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1318.045492] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1318.143310] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1318.169710] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1318.196305] binder: 23201:23206 unknown command 1077961710 [ 1318.209694] binder: 23201:23206 ioctl c0306201 20000140 returned -22 [ 1318.216662] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1318.230178] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1318.240498] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1318.248678] binder: 23201:23211 unknown command 1077961710 [ 1318.259040] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1318.270329] binder: 23201:23211 ioctl c0306201 20000140 returned -22 13:57:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x1000000}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:01 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x400000000000000]}], 0x3}}}) 13:57:01 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1801000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x12000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:01 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063ef}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:01 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in={0x2, 0x4e22, @rand_addr=0xc526}], 0x3c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000300), 0x140, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 1318.702392] binder: 23182:23187 ioctl c018620b 0 returned -14 [ 1318.707031] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1318.716117] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1318.768472] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1318.785012] binder: 23218:23222 unknown command 0 [ 1318.785067] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1318.798152] binder: 23218:23222 ioctl c0306201 20000280 returned -22 13:57:01 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1900000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x3f000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:01 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}], 0x3}}}) [ 1318.832973] binder: 23217:23227 unknown command 1077961711 [ 1318.860181] binder: 23225:23230 ioctl c018620b 0 returned -14 [ 1318.861718] binder: 23217:23227 ioctl c0306201 20000140 returned -22 13:57:02 executing program 2: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x314, 0x0, &(0x7f0000000080)=[@request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) [ 1318.907533] binder: 23217:23232 unknown command 1077961711 [ 1318.922981] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1318.927546] binder: 23217:23232 ioctl c0306201 20000140 returned -22 13:57:02 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063f0}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1318.998849] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:02 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], 0x3}}}) [ 1319.134332] binder: 23247:23250 unknown command 1077961712 [ 1319.164429] binder: 23247:23250 ioctl c0306201 20000140 returned -22 [ 1319.205722] binder: 23247:23256 unknown command 1077961712 [ 1319.225127] binder: 23247:23256 ioctl c0306201 20000140 returned -22 13:57:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x12000000}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:02 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1901000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x60000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) lseek(r0, 0x0, 0x8000000003) 13:57:02 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}], 0x3}}}) 13:57:02 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063f1}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1319.649758] binder: 23225:23230 ioctl c018620b 0 returned -14 [ 1319.710419] binder: 23262:23266 unknown command 1077961713 [ 1319.746960] binder: 23262:23266 ioctl c0306201 20000140 returned -22 13:57:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0xfdfdffff}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000d8527aaffb2cf161af983396060dacc21292978781583f8083a2e245128ca89c30d30f9ed5dfc3b4"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f00000000c0)=0x4) 13:57:02 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}], 0x3}}}) [ 1319.780597] binder: 23272:23274 ioctl c018620b 0 returned -14 13:57:02 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063f2}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:02 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1a00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1319.875815] binder: 23272:23274 ioctl c018620b 0 returned -14 13:57:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0xfffffdfd}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x20000000}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:03 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x2000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4000, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000040)=""/167) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000018000000000000e0678513c9ac762414003000000000000000"]], 0x0, 0x0, 0x0}) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f00000001c0), 0x4) [ 1319.977989] binder: 23285:23292 unknown command 1077961714 [ 1319.998749] binder: 23285:23292 ioctl c0306201 20000140 returned -22 13:57:03 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}], 0x3}}}) 13:57:03 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1a01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1320.041019] binder: 23285:23295 unknown command 1077961714 [ 1320.073091] binder: 23285:23295 ioctl c0306201 20000140 returned -22 13:57:03 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063f3}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x100000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1320.192350] binder: 23302:23306 ioctl c018620b 0 returned -14 13:57:03 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1b00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:03 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}], 0x3}}}) [ 1320.253172] binder: 23309:23313 unknown command 1077961715 [ 1320.286342] binder: 23309:23313 ioctl c0306201 20000140 returned -22 13:57:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x142) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000080)={0x7, 0x9, 0x8, 0x7fffffff, 0xffffffff00000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1320.325514] binder: 23309:23322 unknown command 1077961715 [ 1320.345755] binder: 23309:23322 ioctl c0306201 20000140 returned -22 13:57:03 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}], 0x3}}}) 13:57:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x1200000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:03 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063f4}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1320.577122] binder: 23335:23341 unknown command 1077961716 [ 1320.593750] binder: 23335:23341 ioctl c0306201 20000140 returned -22 [ 1320.616015] binder: 23335:23342 unknown command 1077961716 [ 1320.624137] binder: 23335:23342 ioctl c0306201 20000140 returned -22 13:57:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0xfdfdffff}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:04 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1b01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018100000000000003000000000000000"]], 0x0, 0x0, 0x0}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0x2, 0x4, 0x4, 0x0, {0x77359400}, {0x4, 0xa, 0x1, 0x3, 0x4, 0x0, "e61ee5ae"}, 0xf4, 0x3, @planes=&(0x7f0000000040)={0x5, 0x1000, @userptr=0x3197, 0x1}, 0x4}) 13:57:04 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}], 0x3}}}) 13:57:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x3f00000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:04 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063f5}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1320.969410] binder: 23302:23306 ioctl c018620b 0 returned -14 [ 1321.063236] binder: 23347:23354 unknown command 1077961717 [ 1321.077717] binder: 23347:23354 ioctl c0306201 20000140 returned -22 13:57:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x6000000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x100800) r1 = syz_open_dev$amidi(&(0x7f0000000600)='/dev/amidi#\x00', 0x7, 0x0) bind$inet6(r1, &(0x7f0000000640)={0xa, 0x4e24, 0xfffffffffffffc01, @remote, 0xffffffffffffffff}, 0x1c) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x5, &(0x7f0000000540)=[{&(0x7f00000000c0)="fe2b9b50887097ac8048551465993ffd3d7065ec3e4ceb9e40f365ff37ec90117fc5b8023bcfdae4cdab426ad3e367efd25bbabdaf0ce1a8a5b5bbd6c7dea87234460fac1b9a0b9067683a49f0cf4098242f1b9c7798f8f62aac114fbba688af0d31f804f381da1f9966e3d6b40725245122ebe256b55e664500c21280a51b8332b506757b48d8ffdda542c1d77dd9be94dc70c44ced24ba8198611e36d414f925e215", 0xa3, 0x9}, {&(0x7f0000000380)="43514435ff174714b7b944a2fa0cbc7d6153961b78a8f8bc99921f0742a5e2c30caf5f7847ad64fc5262ba10825c9401d97060f5e09154221cb616f01094b0b5a3409bb672f112574adc0ce3ce45eac7519d975aad3b49f7c2355a2fa70ae1d76da5e3cead7a0111b0c8c8da12524ee3889292fe6cb7600fb51e934da97c175c07ed08b557113532b875f41f013d527031ed65fe9bdc11a5068b757fcb93765a3a42a646bf10", 0xa6, 0x8001}, {&(0x7f0000000480)="3014b16d044b292eda176638e8b468b906732c96950d7295b3b22e97ad65cf0dd5f29aea1ee85043d30302551c99baffe3a1d1a1f5d585f556c7888ae2c81067ae4bfd62a236bc6f6c853db27b8ea7118e38ad781f666ae270befbd179c8a38674db9d4757f8503ee9e0f6f471b687190ed798fb7b2d2fffb9139e0222cb451a8de2eec8910f7d9afafe36f54026bacbe1a306bdbb6e16268bf987c2fd0ff642d16278", 0xa3, 0x4}, {&(0x7f0000000180)="607e29063140b7eeaf4fbd2c5a080232cc7fff09d5e1e9a8ba24f2eac055f9f36ed07573e73a5d94e63f8d4b8227551313979f7c06e0d7741b7db4b522b4750ec8349b34eacb3c7d1d8dc327d68569306b5f", 0x52, 0x3}, {&(0x7f0000000280)="67feeabd3cfe5a46985141d1d9f9457a4aad02889a94c656b32487f55c1e05ab1826a78d384db5eefe7192327a5040c67d510dbbacfe90b20e37c43e6fbbba69b0", 0x41, 0x3}], 0x80000, &(0x7f00000005c0)=ANY=[@ANYBLOB="6e6f666c7573686f6e636f6d6d6923ddf45401cf749cdb75742c7065726d69745f646972656374696f2c646f6e745f6d656173757265"]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:04 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x2}], 0x3}}}) 13:57:04 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1c00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1321.107743] binder: 23353:23360 ioctl c018620b 0 returned -14 [ 1321.113868] binder: 23347:23361 unknown command 1077961717 [ 1321.137141] binder: 23347:23361 ioctl c0306201 20000140 returned -22 13:57:04 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063f6}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x0, 0xfdfdffff00000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1321.380321] binder: 23381:23382 unknown command 1077961718 [ 1321.413816] binder: 23381:23382 ioctl c0306201 20000140 returned -22 [ 1321.438146] binder: 23381:23387 unknown command 1077961718 [ 1321.458551] binder: 23381:23387 ioctl c0306201 20000140 returned -22 13:57:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0xfffffdfd}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:04 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x4}], 0x3}}}) 13:57:04 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1c01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:04 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x100000000000) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a6273000000000000000000000000005c000000000000002a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 13:57:04 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063f7}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1321.897504] binder: 23353:23360 ioctl c018620b 0 returned -14 13:57:05 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x1000000}], 0x3}}}) [ 1322.000581] binder: 23394:23403 unknown command 1077961719 [ 1322.031147] binder: 23394:23403 ioctl c0306201 20000140 returned -22 13:57:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x60}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:05 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1d00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1322.053944] binder: 23401:23406 ioctl c018620b 0 returned -14 [ 1322.068375] binder: 23394:23409 unknown command 1077961719 [ 1322.085775] binder: 23394:23409 ioctl c0306201 20000140 returned -22 13:57:05 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x2000000}], 0x3}}}) 13:57:05 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063f8}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x100000000000000}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1322.225304] binder: 23416:23420 ioctl c018620c 20000000 returned -22 13:57:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x1200}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x1) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000040)={0x20, 0xc, 0x7, 'queue1\x00', 0x200}) 13:57:05 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1d01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:05 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x4000000}], 0x3}}}) [ 1322.355493] binder: 23427:23431 unknown command 1077961720 [ 1322.365535] binder: 23429:23432 ioctl c018620b 0 returned -14 [ 1322.373594] binder: 23427:23431 ioctl c0306201 20000140 returned -22 13:57:05 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063f9}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x3f00}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0)=0x6, 0x4) write$P9_RSTATFS(r1, &(0x7f0000000100)={0x43, 0x9, 0x2, {0x0, 0x0, 0x2, 0x9, 0x7, 0x5, 0x23a143e1, 0x35, 0x866}}, 0x43) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000040)=""/79) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffffc49, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r0], 0xffffffffffffffa5, 0x0, 0x0}) 13:57:05 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1e00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:05 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x100000000000000}], 0x3}}}) 13:57:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x6000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1322.657492] binder: 23452:23456 unknown command 808464432 [ 1322.692805] binder: 23452:23456 ioctl c0306201 20000440 returned -22 [ 1322.708189] binder: 23453:23459 unknown command 1077961721 [ 1322.728543] binder: 23453:23459 ioctl c0306201 20000140 returned -22 13:57:05 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1e01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1322.753561] binder: 23453:23465 unknown command 1077961721 [ 1322.776916] binder: 23453:23465 ioctl c0306201 20000140 returned -22 [ 1322.809285] binder_alloc_new_buf_locked: 33 callbacks suppressed [ 1322.809295] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1322.865775] binder_alloc_new_buf_locked: 33 callbacks suppressed [ 1322.865794] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x1200000000000000}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x7c, 0x0, &(0x7f00000001c0)=[@release, @release, @request_death={0x400c630e, 0x1}, @enter_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/102, 0x66, 0x0, 0xfb2b73d}, @ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x0, 0x1, 0x22}, @fda={0x66646185, 0x8, 0x1, 0x22}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}}, @decrefs={0x40046307, 0x1}, @dead_binder_done], 0x7e, 0x0, &(0x7f0000000240)="31f12777072477f93ff07db4b13e2201334a3c5cc0aa2f622dde80870991ef2cde287d87c9961c2ad61ecaa8b65794390c28759fca938fb993b2d8b62c8abaf51089fac829d75c20a029777992e95fa8f7229079cab42df582eda5625f389bfde3e5b945fa7c5d5aeeb5218ac35036dbced4eab06d1a49ca4967ffe72791"}) fcntl$notify(r0, 0x402, 0x80000004) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xc, 0x0, &(0x7f00000000c0)=[@dead_binder_done], 0x10b, 0x0, 0x0}) 13:57:06 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063fa}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:06 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x200000000000000}], 0x3}}}) 13:57:06 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1f00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x1000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1323.163105] binder: 23429:23432 ioctl c018620b 0 returned -14 [ 1323.163963] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1323.177965] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1323.249734] binder: 23478:23483 ioctl c0306201 20000440 returned -14 [ 1323.282086] binder: 23481:23487 unknown command 1077961722 [ 1323.287767] binder: 23481:23487 ioctl c0306201 20000140 returned -22 13:57:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0xfffffffffffffffa, 0x8, 0x1, 0x80, 0x3, 0x200, 0x4, 0x100, 0x80000000, 0xf6de, 0x7}, 0xb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) bind$xdp(r1, &(0x7f00000004c0)={0x2c, 0x0, r3, 0x22, r1}, 0x10) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x2e9ed7f8, 0x2, [0xb70, 0x1]}, &(0x7f0000000380)=0xc) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000003c0)={r4, 0xffffffffffffffff}, 0x8) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x600, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0xfffffffffffffff8, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40844}, 0x80) 13:57:06 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x1f01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:06 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x400000000000000}], 0x3}}}) [ 1323.319717] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1323.329131] binder: 23485:23492 ioctl c018620b 0 returned -14 [ 1323.346871] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1323.413877] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1323.420293] binder: 23481:23495 unknown command 1077961722 [ 1323.441008] binder: 23481:23495 ioctl c0306201 20000140 returned -22 13:57:06 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2000000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:06 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063fb}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x12000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1323.478624] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1323.522022] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1323.530734] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1323.583373] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1323.628001] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1323.662528] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1323.676982] binder: 23513:23516 unknown command 1077961723 [ 1323.685603] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1323.691488] binder: 23513:23516 ioctl c0306201 20000140 returned -22 [ 1323.725573] binder: 23513:23519 unknown command 1077961723 [ 1323.732313] binder: 23513:23519 ioctl c0306201 20000140 returned -22 13:57:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x2000800000000000) r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x3, 0x40000) bind$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x2, {0x8, 0x3c5, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffe1, 0x2}, 0xe) fsetxattr$security_evm(r0, &(0x7f0000000280)='security.evm\x00', &(0x7f00000002c0)=@v1={0x2, "64f85d3461c9"}, 0x7, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000010744cb100000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) fcntl$setsig(r0, 0xa, 0x30) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x802) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @empty, 0x12}}, 0x101, 0x6}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000680)={r3, 0x80000001}, &(0x7f00000006c0)=0x8) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000a80)={0x9, &(0x7f0000000100)=""/97, &(0x7f0000000980)=[{0x10001, 0x36, 0x8, &(0x7f0000000480)=""/54}, {0x6, 0xfa, 0x3, &(0x7f00000004c0)=""/250}, {0x6, 0x20, 0x9, &(0x7f0000000700)=""/32}, {0x8000, 0x2f, 0x8, &(0x7f0000000740)=""/47}, {0x6, 0x25, 0x4, &(0x7f0000000780)=""/37}, {0x8, 0xe, 0x47, &(0x7f00000007c0)=""/14}, {0x7, 0x8, 0x6, &(0x7f0000000800)=""/8}, {0x1, 0x78, 0x5, &(0x7f0000000840)=""/120}, {0x2, 0x87, 0x4, &(0x7f00000008c0)=""/135}]}) keyctl$get_security(0x11, r2, &(0x7f0000000040)=""/128, 0x80) 13:57:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x2000000000000000}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:07 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2001000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:07 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x2}], 0x3}}}) 13:57:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x3f000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:07 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063fc}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1324.114603] binder: 23485:23492 ioctl c018620b 0 returned -14 [ 1324.114799] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1324.128337] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:07 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2100000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1324.232679] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1324.247190] binder: 23526:23536 unknown command 1077961724 [ 1324.248622] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:07 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x4}], 0x3}}}) 13:57:07 executing program 2: r0 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='+eth1%posix_acl_accessnodev)\x00', 0xffffffffffffffff) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r0, 0xba, 0x76}, &(0x7f0000000100)={'enc=', 'pkcs1', ' hash=', {'sha224-ssse3\x00'}}, &(0x7f0000000480)="0671d28c1a9235f5d89f6d90f1426b3baf461a573db7312f2ba7097ff7f2ea01a0385cffb3beb0678a1dd16bbc70570b8cfa65dc719a98d5dda35284c46cdf177ede986d6e27bb4470ceff5623a72cbc4354d9c8985b65fd434ec6240edfa373994abbc5412056069499a815730ab9c2c931496bc282dd4eeacecf1a85adf3414cdc19a2f26eaf82e9a2c53748ddf58202f04fe8759cc4946ae7b56e152d4352d8411042063fb602105affca29d16bb931db7287796d2dbc8639", &(0x7f0000000180)="f97826d693bb039841de98e67b8057246271282378a3d499d69ed646e88c1d52ab722419578b2539c18230a7de3d7a95332b9d2d811e877b31f4f6b4ac5bc79d35bdffd77038592d97b3f9d6d54d85fd4d06166e7c03143b749771a0467dd3027c3d0213175ed7db426aacf30fbdb894852939e77403") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000600)='/proc/capi/capi20\x00', 0x80, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000084}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xe89}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="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"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) r4 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@l2, &(0x7f0000000380)=0x80, 0x80800) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0xfffffffffffff000, 0x92d, 0x20}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000580)=@assoc_value={r5, 0x2}, &(0x7f00000005c0)=0x8) 13:57:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x60000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1324.289642] binder: 23526:23536 ioctl c0306201 20000140 returned -22 [ 1324.324445] binder: 23534:23538 ioctl c018620b 0 returned -14 [ 1324.344622] binder: 23526:23540 unknown command 1077961724 [ 1324.382814] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1324.389753] binder: 23526:23540 ioctl c0306201 20000140 returned -22 13:57:07 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063fd}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1324.429326] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x100) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) 13:57:07 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x1000000}], 0x3}}}) [ 1324.624806] binder: 23558:23562 unknown command 1077961725 [ 1324.653798] binder: 23558:23562 ioctl c0306201 20000140 returned -22 [ 1324.669275] binder: 23558:23566 unknown command 1077961725 [ 1324.676169] binder: 23558:23566 ioctl c0306201 20000140 returned -22 13:57:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0xfdfdffff00000000}}, &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:08 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2101000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0xfdfdffff}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:08 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x2000000}], 0x3}}}) 13:57:08 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x404063fe}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:08 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r2 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000040)={0x100000001, 0x7fffffff, r1, 0x0, r2, 0x0, 0x8001, 0xff}) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1325.113245] binder: 23534:23538 ioctl c018620b 0 returned -14 13:57:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0xfffffdfd}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:08 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x4000000}], 0x3}}}) 13:57:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='statm\x00') ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000040)=0x1) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000080)={0x1, 0x0, {0x1, 0x9, 0x80000001, 0xfffffffffffff801}}) [ 1325.228193] binder: 23574:23582 unknown command 1077961726 [ 1325.252706] binder: 23577:23585 ioctl c018620b 0 returned -14 [ 1325.260629] binder: 23574:23582 ioctl c0306201 20000140 returned -22 13:57:08 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2200000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1325.312650] binder: 23574:23587 unknown command 1077961726 [ 1325.356736] binder: 23574:23587 ioctl c0306201 20000140 returned -22 13:57:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x100000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:08 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40486311}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x12}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xffffffffffffff02, 0x0, &(0x7f00000000c0)=[@dead_binder_done], 0x0, 0x0, 0x0}) 13:57:09 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x100000000000000}], 0x3}}}) 13:57:09 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2201000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x1200000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:09 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40486312}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1326.039149] binder: 23577:23585 ioctl c018620b 0 returned -14 13:57:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x3f00000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:09 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x200000000000000}], 0x3}}}) 13:57:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x401, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r2}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000200000000000000000000054326b3e0a65000000000000000000000000000000480000000000000018009c63a3fb21cd0ac8d0be474d1da782a1e74062bc7636cbc388be13882be6a481f7ed7fa13c22efe7a4c82973", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000228ade00000000"]], 0x0, 0x0, 0x0}) ioctl$FICLONE(r1, 0x40049409, r0) fcntl$addseals(r0, 0x409, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xffffffff00000000) 13:57:09 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2300000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1326.177707] binder: 23623:23629 ioctl c018620b 0 returned -14 13:57:09 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x2, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:09 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x400000000000000}], 0x3}}}) 13:57:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x1200}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x6000000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:10 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2301000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:10 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x3, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:10 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x2]}], 0x3}}}) 13:57:10 executing program 2: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = syz_open_pts(r0, 0x400) ioctl$KDDISABIO(r1, 0x4b37) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852262730000cc8f73c90000000000000000000000000000852a627300000000000000000000000000000000dce5ccb6a6432807000000000000006cf1dd6bc864cadcacbe0000006b63be34309198ff5b1079a19ddb65324fa9a1c6f7368ad49e1a051e498b020b671b99ff5ff52e059bd82ff4c97722a6c04ace4b3d8465ac45100de3ace9407812032897"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) [ 1326.974643] binder: 23623:23629 ioctl c018620b 0 returned -14 13:57:10 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x4]}], 0x3}}}) 13:57:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0xfdfdffff00000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:10 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2400000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:10 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000880)={{0xa, 0x4e24, 0x401, @loopback, 0xffffffffffffff11}, {0xa, 0x4e21, 0x8, @loopback, 0x2}, 0x80000000, [0x1, 0x5, 0x80000000000000, 0x4, 0x3, 0x8, 0x7ff, 0x7]}, 0x5c) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000100)={{0xfffffffffffffff7, 0x3}, 0x1, 0x3, 0x0, {0x3f, 0x2}, 0x7}) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0xc, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="106308400000000000000000c1d9129bb69bb43b27f3b99364c21905a546832d941227cd55cd9fd7305973b484f1b9da20241758c1a7d7247712329c206e376aab94521138842373bc8da9be62bd83af7a8910dd1a84c5cdce8612449c15e8e76bfdd65bce4bd56193d344b8569cc7884180b7ef0397d4524abee5f31b73599f8f1369a293d00d748b4b35bb50d02bfa001db3cecdf63ed49b"], 0x0, 0x0, 0x0}) fcntl$setpipe(r1, 0x407, 0x1) set_mempolicy(0x8000, &(0x7f0000000040)=0xffff, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000900)={0x0, 0x1000, "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"}, &(0x7f0000000180)=0x1008) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r2, 0x6}, &(0x7f0000000200)=0x8) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0)=0x7, 0x4) 13:57:10 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x4, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1327.153839] binder: 23666:23674 ioctl c018620b 0 returned -14 [ 1327.204398] binder: 23666:23674 ioctl c018620b 0 returned -14 13:57:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x2000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:10 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x1000000]}], 0x3}}}) 13:57:10 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2401000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x9, 0x2) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:10 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x9, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1327.446587] binder: 23696:23701 ioctl c018620b 0 returned -14 13:57:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x60}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:10 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x2000000]}], 0x3}}}) 13:57:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) 13:57:10 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2500000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:10 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0xf, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x1200}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1327.815811] binder_alloc_new_buf_locked: 39 callbacks suppressed [ 1327.815822] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1327.879966] binder_alloc: 13562: binder_alloc_buf size 8 failed, no address space [ 1327.895979] binder_alloc_new_buf_locked: 40 callbacks suppressed [ 1327.895996] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1327.911438] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1327.919628] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1327.934050] binder_alloc: 13562: binder_alloc_buf size 8 failed, no address space [ 1327.964593] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x1000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:11 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x4000000]}], 0x3}}}) 13:57:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.redirect\x00', &(0x7f00000001c0)='\'3selfsystem(keyringtrusted\x00', 0x1c, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/enforce\x00', 0x250000, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000002c0)) write$vnet(r1, &(0x7f0000000580)={0x1, {&(0x7f0000000480)=""/219, 0xdb, &(0x7f0000000380)=""/80, 0x0, 0x3}}, 0x68) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000eeffff47000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) set_robust_list(&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x10001, &(0x7f00000000c0)={&(0x7f0000000080)}}, 0x18) 13:57:11 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2501000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x3f00}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:11 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x25, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1328.237629] binder: 23696:23701 ioctl c018620b 0 returned -14 [ 1328.237837] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1328.251789] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:11 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x100000000000000]}], 0x3}}}) [ 1328.322053] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1328.348658] binder: 23756:23757 ioctl c018620b 0 returned -14 13:57:11 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2600000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1328.370985] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1328.394495] binder_alloc: 13562: binder_alloc_buf size 8 failed, no address space [ 1328.412348] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:11 executing program 2: setitimer(0x1, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000040)) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x4) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x400000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1328.437004] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1328.471019] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x6000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1328.491534] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1328.499292] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:11 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x200000000000000]}], 0x3}}}) [ 1328.535284] binder_alloc: 13562: binder_alloc_buf size 8 failed, no address space [ 1328.547493] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1328.630688] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x12000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:12 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2601000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:12 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x55, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:12 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x400000000000000]}], 0x3}}}) 13:57:12 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x141000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f, 0x9}}, 0x20) write$P9_RLCREATE(r0, &(0x7f00000000c0)={0x18, 0xf, 0x2, {{0x4, 0x4, 0x5}, 0x80000000}}, 0x18) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x402, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r2 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) fcntl$addseals(r0, 0x409, 0xf) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000001800ea00000000003000000000000000"]], 0x0, 0x0, 0x0}) ftruncate(r2, 0x0) 13:57:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x1000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1329.144797] binder: 23756:23757 ioctl c018620b 0 returned -14 13:57:12 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x2]}], 0x3}}}) 13:57:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:12 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x62, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1329.260333] binder: 23802:23803 ioctl c018620b 0 returned -14 13:57:12 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x80800) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000000)=0x9) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) r2 = semget(0x0, 0x1, 0x6) semctl$GETVAL(r2, 0x6, 0xc, &(0x7f0000000280)=""/117) r3 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000180)=0x4) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000040)={0x860}) 13:57:12 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2700000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1329.318527] binder: 23802:23803 ioctl c018620b 0 returned -14 13:57:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x20000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:12 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x4]}], 0x3}}}) 13:57:12 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x63, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00634040000000000000000000000000090000000800000000000000000000000000000000038fece98d46ad66b93ddb24394b5fb04da32b126c2a660a5f55c8fb8124f9066583a4f73ce40fa4a7956f68c1594ef13660dd4b7c5e08612244644af3f36e629d030597a4c26602a6da66b04b805ecf818c2946df43a0a66760ccf44f7b9a779b74ddadf17b1e669461572deb0b5d74fca2b8511c7326d3a048726c01f13c366835edc97f9a9655bc8e2ae8bcb5bc4eb0c930f2450350959b231d72a4924cf2fc88db5c95c907bc03418614fce9f0fbc199a9112885c91780b3a6a5f9805292ac0800"/246, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'veth1Tto_bond\x00', 0x3802}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000000)={0x1, 0x1, [@link_local]}) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000480)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x6, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="eb8c91c29cdf5e56d551c90e999136bbc7c81f5eef7d7777170bbddd0b5fc2fca3909533d4c07839ce96e5c124523207c3997831c572aa9372db0c45f66b9b890bbbeae2e77edb5f43ad15c814094a0f9372d88f95e1a36f75a546dbc75857c653629414da1a3124cdd093c71d5af0fc9c5fa387f5cf19dca8a64b94a7d66ec206eadba2af21132b9e0c128e5a7d9d9b804117306203595407212d809c7f865010fe5c15efe9af780f94b6a1340e11fad9f5ee6856bccc299a2bb2adbff055bbb6f99cc19d2db0c50cbc70712e426fdadf896990421ba797e4ab42", 0xdb}], 0x2008001, &(0x7f0000000380)={[{@resuid={'resuid', 0x3d, r2}}], [{@fsmagic={'fsmagic', 0x3d, 0x6}}, {@uid_gt={'uid>', r3}}]}) 13:57:12 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2701000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x3f000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1329.549651] binder: 23919:23927 ioctl c018620b 0 returned -14 13:57:12 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x1000000]}], 0x3}}}) 13:57:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x60000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:12 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x75ce0d99, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1329.721837] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1329.754861] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 13:57:12 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2800000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1329.779888] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1329.807740] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1329.839877] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 13:57:12 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x2000000]}], 0x3}}}) [ 1329.888979] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1329.901938] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 13:57:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0xfdfdffff}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1329.941151] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1330.090298] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1330.135034] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 13:57:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0xfdfdffff}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:13 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x75ce0d9f, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:13 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2801000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:13 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x4000000]}], 0x3}}}) 13:57:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0xfffffdfd}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x83, 0x10840) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x420, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4118}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xffffffffffffff00}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4014}, 0x20000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1330.335789] binder: 23919:23927 ioctl c018620b 0 returned -14 13:57:13 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x100000000000000]}], 0x3}}}) 13:57:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x100000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:13 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2900000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:13 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x30201, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000180)) syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000001240)={0x0, 0x3ff, 0x8001, 0x3, 0x3, 0x80000000, 0x5, 0x3ff, 0x100000001, 0x0, 0x7}, 0xb) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="a4c6ec9f33"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000001280)=0x1) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) read$FUSE(r0, &(0x7f0000000240), 0x1000) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x8000) fsetxattr$security_smack_transmute(r1, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) 13:57:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000007000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 1330.459963] binder: 23991:23992 ioctl c018620b 0 returned -14 [ 1330.537036] binder: 23991:23992 ioctl c018620b 0 returned -14 13:57:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r2, 0x4}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000480)={r2, @in6={{0xa, 0x4e22, 0x7fff, @mcast2, 0x8001}}, [0x7, 0x9, 0x864c, 0x1ff, 0x400, 0x81, 0x7, 0x4, 0x7, 0x80000001, 0x7, 0x5, 0x0, 0x4, 0x7f]}, &(0x7f00000001c0)=0x100) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000400000000000000000000000000000000048000000000000001500000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000007000000000000003000000000000000a14042c4890470fc9fad7bc74d4b2d18dd7f94941657ee7de2637f7fbc963c20bc74e513589db5366fe22aac3a20e502b82d68a243db4182b8ae2c5f9961e0de908f8542581464696b2056422cbdccd9d961bd909ce4421d78b6e79cb087d31705704e9973"]], 0x0, 0x0, 0x0}) [ 1330.610129] binder: 24001:24006 unknown command -1611872604 13:57:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0xfffffdfd}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:13 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x200000000000000]}], 0x3}}}) 13:57:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x1200000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1330.664116] binder: 24001:24006 ioctl c0306201 20000140 returned -22 [ 1330.679967] binder: 24001:24006 unknown command -1611872604 [ 1330.687602] binder: 24001:24006 ioctl c0306201 20000140 returned -22 13:57:13 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2901000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1330.791671] binder: 24022:24024 ioctl c018620b 0 returned -14 13:57:13 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x400000000000000]}], 0x3}}}) 13:57:13 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) epoll_create(0x6) [ 1330.844736] binder: 24022:24024 ioctl c018620b 0 returned -14 13:57:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x3f00000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00#\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 13:57:14 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2a00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x100000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x21) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:14 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x802) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00cV@'], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x6000000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:14 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x2]}], 0x3}}}) [ 1331.077440] binder: 24049:24051 ioctl c018620b 0 returned -14 13:57:14 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2a01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:14 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x4]}], 0x3}}}) 13:57:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0xfdfdffff00000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0xc0, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000080)=0x4, 0x4) r2 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) flistxattr(r0, &(0x7f0000000740)=""/214, 0xd6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xb4, 0x0, &(0x7f0000000680)=[@acquire_done={0x40106309, 0x3}, @free_buffer={0x40086303, r2}, @clear_death={0x400c630f, 0x1}, @register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@weak_handle={0x77682a85, 0x1, 0x1}, @flat=@weak_binder={0x77622a85, 0xa}, @fda={0x66646185, 0x9, 0x0, 0x7}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1040}, @acquire={0x40046305, 0x3}, @dead_binder_done, @dead_binder_done, @request_death={0x400c630e, 0x3}, @exit_looper], 0x33, 0x0, &(0x7f0000000280)="855fc5bbbd1c4d506ad8670dbc88a10c4e6ca5546915e95853c425ede8311ebd59ec31548745c934fb8ec8b1269995a86ee10c"}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1331.252385] binder: 24058:24064 unknown command 1079403264 [ 1331.279033] binder: 24058:24064 ioctl c0306201 20000140 returned -22 13:57:14 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x1000000]}], 0x3}}}) 13:57:14 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x4200) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00a49844"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) finit_module(r0, &(0x7f0000000000)='/dev/binder#\x00', 0x2) 13:57:14 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2b00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1331.543761] binder: 24088:24089 unknown command 1150854144 [ 1331.557732] binder: 24088:24089 ioctl c0306201 20000140 returned -22 [ 1331.568398] binder: 24088:24089 ioctl 660c 0 returned -22 [ 1331.583792] binder: 24088:24093 unknown command 1150854144 [ 1331.589855] binder: 24088:24093 ioctl c0306201 20000140 returned -22 [ 1331.605172] binder: 24088:24089 ioctl 660c 0 returned -22 13:57:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x1200000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:14 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000001000000000000048000000000000001806000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000007c72848ca042aa4800009d00"/44, @ANYRES32=0x0], 0x30}, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x5, 0x8}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r2, 0x80}, &(0x7f0000000280)=0xc) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000040)={0x0, [0x74, 0x4, 0x0, 0xfff, 0x4, 0x90, 0xae2, 0x8ba3, 0x5, 0x3, 0x8001, 0x9, 0xf71, 0x8, 0x6, 0x9, 0x72b, 0xffffffff, 0x9f, 0x3, 0x1, 0x4, 0x3, 0x0, 0x6, 0xb4e3, 0x40, 0x8000, 0x3, 0x4, 0x7, 0x8, 0x3, 0x1f, 0xfff, 0x1000, 0x2, 0x905, 0xfff, 0x553, 0x100000001, 0x9, 0x8, 0x80, 0x2, 0x2c7, 0x7, 0x8], 0x9}) 13:57:14 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x2000000]}], 0x3}}}) 13:57:14 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2b01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:14 executing program 5: syz_open_dev$binder(&(0x7f0000001240)='/dev/binder#\x00', 0x0, 0x800) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x800, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x0}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000180)={r2, &(0x7f0000000200)=""/4096}) [ 1331.867694] binder: 24049:24051 ioctl c018620b 0 returned -14 13:57:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x60}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:15 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="96c692f9df81748b9dd4a2c3852d37cf8016cfd6358832b0d05047bbf55fe279f2df4c856edaf8555d5f0e4d00"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1331.974091] binder: 24106:24112 ioctl c018620b 0 returned -14 13:57:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x323, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 13:57:15 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2c00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:15 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x4000000]}], 0x3}}}) [ 1332.103690] binder: 24117:24121 unknown command -107821418 13:57:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x1200}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1332.155458] binder: 24117:24121 ioctl c0306201 20000140 returned -22 [ 1332.168148] binder: 24125:24129 unknown command 0 [ 1332.191873] binder: 24125:24129 ioctl c0306201 20000440 returned -22 [ 1332.215261] binder: 24117:24132 unknown command -107821418 [ 1332.248713] binder: 24117:24132 ioctl c0306201 20000140 returned -22 13:57:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x2000000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:15 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2c01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:15 executing program 2: r0 = request_key(&(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000380)='/dev/binder#\x00', 0xfffffffffffffffa) request_key(&(0x7f0000000140)='syzkaller\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='trusted\x00', r0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000000c0)={r3, 0xb45}, &(0x7f0000000100)=0x8) 13:57:15 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x100000000000000]}], 0x3}}}) 13:57:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x3f00}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:15 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x800) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffd5b, 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x8000a0, &(0x7f00000000c0)='\x00'}) [ 1332.767142] binder: 24106:24112 ioctl c018620b 0 returned -14 13:57:15 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x200000000000000]}], 0x3}}}) [ 1332.835116] binder_alloc_new_buf_locked: 43 callbacks suppressed [ 1332.835128] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space 13:57:15 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000040)) [ 1332.901303] binder: 24152:24154 ioctl c018620b 0 returned -14 [ 1332.924589] binder_alloc_new_buf_locked: 42 callbacks suppressed [ 1332.924603] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:15 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x400000000000000]}], 0x3}}}) 13:57:16 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2d00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1332.951969] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1332.964340] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1332.975269] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1332.997090] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x6000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:16 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x2]}], 0x3}}}) [ 1333.089877] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1333.104847] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1333.134950] binder_alloc: 13562: binder_alloc_buf size 8 failed, no address space [ 1333.168030] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1333.227559] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1333.247706] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1333.258277] binder_alloc: 13562: binder_alloc_buf size 8 failed, no address space [ 1333.267970] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0xfdfdffff00000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:16 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}], 0x3}}}) 13:57:16 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2d01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x1000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:16 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b9c9d874e0b01e79208d475ca5cc2b1618e72ac1f36edf5fb6a6aa962817f5f3cf7429bff6963670ea21fdcdc5372ba8f53733e55493eb67767c5e594f0b35f04092a49d0aaff68267e1ba1d0fc6856172bd35e7f7d645ee695bc12fc7f5af97"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1333.676506] binder: 24152:24154 ioctl c018620b 0 returned -14 [ 1333.676742] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1333.690239] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1333.758893] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1333.763837] binder: 24188:24191 unknown command 1960364473 [ 1333.784114] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1333.799764] binder: 24192:24195 ioctl c018620b 0 returned -14 13:57:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={@flat=@binder={0x73622a85, 0x100, 0x1}, @fda={0x66646185, 0x4, 0x2, 0x38}, @flat=@binder={0x73622a85, 0xa, 0x2}}, &(0x7f0000000100)}, 0x1400}], 0xcce286209a5de707, 0x0, 0x0}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200140, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x10001, 0x4) 13:57:16 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000]}], 0x3}}}) 13:57:16 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2e00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1333.818203] binder: 24188:24191 ioctl c0306201 20000140 returned -22 13:57:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x12000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1333.866959] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1333.911040] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1333.950590] binder: 24205:24208 ioctl c0306201 20000440 returned -14 13:57:17 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) setxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000001280)='security.capability\x00', &(0x7f00000012c0)=@v2={0x2000000, [{0x0, 0x8}, {0xed, 0x7fffffff}]}, 0x14, 0x1) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1080}}, 0x80) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:17 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x2000000]}], 0x3}}}) [ 1333.974791] binder: 24205:24208 ioctl c0306201 20000440 returned -14 13:57:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x12}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x3f000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xada6, 0x2000) ioctl$TIOCSIG(r1, 0x40045436, 0x30) write$P9_RSYMLINK(r1, &(0x7f0000000140)={0x14, 0x11, 0x2, {0x20, 0x3, 0x5}}, 0x14) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f0000000080)="deca7213652be9e994a7399701d4ef82551240205ff9ec9908860345faec9887176466ef232a91424eab323a31d56cd5763e25cae423a63c7fe09ef2693ba896acea3a03d4baa724fba263877aabd985b02c35a0ac4cb37a73c9f414c9ba15000bccd0a6c4784f1c18"}, 0x10) 13:57:17 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2e01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:17 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x4000000]}], 0x3}}}) 13:57:17 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x2000) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000100)={0x22, &(0x7f0000000040)=""/34}) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1334.586966] binder: 24192:24195 ioctl c018620b 0 returned -14 13:57:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x60000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:17 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x100000000000000]}], 0x3}}}) 13:57:17 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x103280, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x0, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{}]}) 13:57:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x968, 0x7a8, 0x4d0, 0x5e0, 0x0, 0x4d0, 0x898, 0x898, 0x898, 0x898, 0x898, 0x6, &(0x7f0000000040), {[{{@ipv6={@remote, @empty, [0xffffff00, 0x0, 0xff000000], [0xffffffff, 0xff000000, 0x73bd58212354d78b, 0xff], 'hsr0\x00', 'veth0_to_hsr\x00', {}, {}, 0x89, 0x8, 0x2, 0x20}, 0x0, 0x120, 0x180, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x5, 0x8, 0x3, 0xc, 0x1}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x9}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xffffffff, 0xff000000, 0x0, 0xff0000ff], 0x4e22, 0x4e21, 0x4e21, 0x4e22, 0x4, 0x3, 0xbe0, 0x2, 0x8}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'netdevsim0\x00', 'teql0\x00', {}, {0xff}, 0x2c, 0x2, 0x4, 0x1}, 0x0, 0x228, 0x350, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x0, 0x2083, 0x7ff}}, @common=@rt={0x138, 'rt\x00', 0x0, {0x4, 0x127, 0x2, 0x4, 0xe, 0x6, [@dev={0xfe, 0x80, [], 0xf}, @dev={0xfe, 0x80, [], 0xe}, @remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @local, @dev={0xfe, 0x80, [], 0x26}, @rand_addr="5b80856d404093f2954481c0a38e60f4", @empty, @mcast2, @rand_addr="3a902fd7311a84eb418ac0e31b043d71", @loopback, @loopback, @local, @dev={0xfe, 0x80, [], 0x18}, @ipv4={[], [], @empty}, @rand_addr="b21307931764cbcb3e69bc4ab5969e50"], 0xa}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xc0, 'system_u:object_r:dhcpc_exec_t:s0\x00'}}}, {{@ipv6={@rand_addr="7d0a4a1051869556e683bf806f4db792", @ipv4={[], [], @remote}, [0xff, 0xffffffff, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff], 'nlmon0\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x7f, 0x4, 0x22}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@local, @ipv4=@empty, 0x18, 0x16, 0x9}}}, {{@uncond, 0x0, 0x180, 0x1c8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xd}}, @common=@srh1={0x90, 'srh\x00', 0x1, {0x88, 0x1f, 0x2, 0x5, 0x5b5, @loopback, @local, @mcast1, [0xffffffff, 0xffffffff, 0xff0000ff, 0xffffff00], [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0xff000000], 0x400, 0x800}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@remote, 0x30, 0x1e, 0x200}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x2, 0x1000}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9c8) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x10000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1334.716929] binder: 24239:24242 ioctl c018620b 0 returned -14 13:57:17 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2f00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0xfdfdffff}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x1200}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:18 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x200000000000000]}], 0x3}}}) 13:57:18 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x8d9, 0x400000) getresuid(&(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)=0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f00000003c0)=0xe8) getgroups(0x1, &(0x7f0000000400)=[0xffffffffffffffff]) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000540)=0xe8) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1e}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000600)={0x210, 0x0, 0x3, [{{0x2, 0x0, 0x4f37, 0x9, 0x240000000000000, 0x7ff, {0x0, 0x9, 0xffff, 0x2744, 0x9589, 0xfffffffffffffffc, 0x80, 0x4, 0x7fff, 0x1000, 0x0, r1, r2, 0x0, 0x17}}, {0x4, 0x4a2, 0x8, 0x0, 'cgroup^-'}}, {{0x4, 0x1, 0xebb, 0x7ff, 0x5, 0x200, {0x6, 0xee3, 0x101, 0x0, 0x7, 0x1, 0x6, 0x9, 0x100000001, 0x6, 0x80, r3, r4, 0x9, 0x7}}, {0x4, 0x1ff, 0x1c, 0x1, '(\'*bdev}{vboxnet0em1self}em1'}}, {{0x1, 0x2, 0xffff, 0x3, 0x8, 0x3, {0x5, 0xbf40, 0x9, 0x4, 0x3d7, 0xa9, 0xfff, 0x8, 0x7, 0xfffffffffffffff7, 0x0, r5, r7, 0xb3e, 0xa8}}, {0x1, 0x5, 0xd, 0x1ff, '/dev/binder#\x00'}}]}, 0x210) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x10000000) r8 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0)) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x8, 0x3}, 0xfffffffffffffffd) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e22, 0x1b5f, @empty, 0x4}}, 0x80000001, 0x8b3}, 0x90) 13:57:18 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x2f01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0xfffffdfd}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1335.512928] binder: 24239:24242 ioctl c018620b 0 returned -14 13:57:18 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x400000000000000]}], 0x3}}}) 13:57:18 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x100000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1335.653841] binder: 24284:24285 ioctl c018620b 0 returned -14 13:57:18 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3000000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x10000, 0xa2000) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x402100, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x2000, &(0x7f0000000080), 0x0, r2, 0x4}) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000180022000000230030000000000000000d39fd6f86"]], 0x0, 0x0, 0x0}) [ 1335.737804] binder: 24284:24285 ioctl c018620b 0 returned -14 13:57:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x2000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x1200000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:19 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}], 0x3}}}) 13:57:19 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="d6ffd638ae8e754cce5dacc0263e97d4a43460e1df0b2bd90934e10b4950d52e1506650f774b70d9e15fcd0588c1c421e540504877cea5051fda5f66f171fee99f1f8a8f84a530cf6ea44d1f0693c79ad6b065a30000795c11608b860df73c1411d6d840875426ca1be245e4c4ba874615bf6d36760b42327df98c1a36ee96df494718fa07528bc5f2c7d0bb86beefdf7f88442ca7913ffc2a2474ca05d3a2e3a651f8697b67cc72f9"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000100)={0x800, &(0x7f0000000040)="016ab3e5806e37324145efd7b1ad1eafb97757f3c0f57e32db406f08931083f18f1f13ce8738a21cc9a521b7d7f225053143bb2eaee3e1847d482be63cfbedfe72a49c0e995be13cf837be4cbfdfcf965f52cc652809813a4b535e48364f12e4353a25871191c4540c8d5a8e"}) 13:57:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:19 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3001000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1335.985993] binder: 24407:24409 ioctl c018620b 0 returned -14 13:57:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x3f00000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:19 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}], 0x3}}}) 13:57:19 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3100000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1336.172970] binder: 24420:24425 unknown command 953614294 [ 1336.200360] binder: 24420:24425 ioctl c0306201 20000140 returned -22 13:57:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000184000000000000030008e0000000000"]], 0x0, 0x0, 0x0}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 13:57:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x6000000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:19 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000480)="f89036765408e42c818b4ef7f05f7f16047d2b7525431d582f7006046989fb94ecbdb21747b234780e06a5428dfbb2c925ebad2c8ba0dc7a05a79a26b90fdde8596750bd2d0ab4396f6945a2072d24215d57bca09956ecaf460e933de65d93fea78bbd05ff8920a56cc6838ec1d68a82e5001d624b02d8ce4fd4851541a466c1c53e53e6090c68fa90f98031c60b99ec22c3a5749169b3b8ed085e55b5861e2759f981de9a6f1fc527300931fc0a94d68ffbaf3aac4902664f9f4ebee52dff71e4d1153fe40df22e3575e02eced62d312736caa5fc919ba0d8d0ed07c3cce90ba7039fb9a5aeaf79125c051feafac12ed7ce635f8c54366a31", 0xf9, 0xfffffffffffffff8) r4 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$search(0xa, r3, &(0x7f00000001c0)='encrypted\x00', &(0x7f0000000280)={'syz', 0x1}, r4) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x511000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{0x7fff, 0x81, 0x3ff, 0x9}, {0x75df, 0x3ff, 0x8, 0x100}, {0x7, 0x8, 0x8, 0x5e6}, {0x401, 0x6, 0x2, 0x7ff}, {0xe5f6, 0x7, 0x66a, 0xfff}, {0xfffffffffffffffe, 0x81, 0x6, 0x4}, {0x7ff, 0x0, 0x3f, 0x6}]}) 13:57:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x1000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:19 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3101000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:19 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}], 0x3}}}) 13:57:19 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x101002, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000180)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0) getsockopt(r1, 0x8, 0x401, &(0x7f0000000200)=""/123, &(0x7f0000000080)=0x7b) shutdown(r1, 0x1) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) 13:57:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0xfdfdffff00000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") socket$inet(0x10, 0x4, 0x80000000c) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010407051dfffd946fa2830020200a00090001000a1d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x10000000000002e3}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xa00, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000280)=""/99) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000b00000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000100)={0x3, 0x0, 0x2, {0x77359400}, 0x7, 0x8000}) [ 1336.772853] binder: 24407:24423 ioctl c018620b 0 returned -14 13:57:19 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3200000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xffffffffffffffa6, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x1}], 0x0, 0x0, 0x0}) 13:57:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:20 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000180)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) sendmsg$nl_generic(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x238, 0x20, 0x10, 0x70bd2c, 0x25dfdbff, {0x18}, [@nested={0x224, 0x65, [@generic="2d3ce2b274db55271af2e7bdfad0c960092e0fb14af902a4aae72e7d81cf9c3b9dcfc0161b2104eadbf3c2ebcd4164bcaacded", @generic="1b6ee33f9d427e5b63937e7046789ed39222cb37507e3fa3343601fdc2c71095b7ec019eaa70830cf34771d208a1a964efb2e86bf112bf1e30041684a4c5a2267c4e0ef03eb11f4557843c", @typed={0x10, 0x2a, @binary="556388868c9bed64d215"}, @typed={0xc, 0x80, @u64=0x40}, @generic="59bc8d744923dfbbfef1f6818da0965376b695654b53023a3f72cd1ea98609c391e08af0fbd760c9ef6e2f648df875ff83c3677b2376f5dcc27868574aee8c869e52fc7365cb6a211ac08239", @generic="8e415ed7f6602f1a6c77c2105a7923917265d05e8b83d19ebb98c4590af544c4352d0e78b8f5c7f3945a7fce768992024ee0830fbcf9c80309bfd1", @generic="a072632e687cedcfa924efcfb1d0eb6a531fb02074f017b26b70a56fde595bdbfe1dc883ca4241c91867369e2009bf9e90cbd415ab7e95666db1588d2021b7ac78f835786bde65b65aa8e26a171a5b29a086e7a4c47cfbb7e2c19522be1060eec629dfe7370f9741c0e729190c5641cd9e2595da9e065a95a648fc402dd5e0586f5c064cdc5c98d6c601c144fbeefb4704bd628cf692208d21ac9f5ec5016c057045576c10474245ea010b27e59a422ead00a00eba9067be64d3df8ce7758e2c60f9362fdd61facb103997c38ec0c841c1fab62ea5e82e055f8e1329ca02033100db52f29ab20b17257b6f4d80ffa6", @typed={0x8, 0x39, @uid=r1}, @typed={0x8, 0x2b, @pid=r2}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x40}, 0x10) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) ioctl$SIOCRSACCEPT(r3, 0x89e3) write$P9_RRENAME(r0, &(0x7f0000000500)={0x7, 0x15, 0x1}, 0x7) 13:57:20 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}], 0x3}}}) [ 1336.945690] binder: 24467:24469 ioctl c018620b 0 returned -14 13:57:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xfffffffffffffe80, 0x0, &(0x7f00000001c0), 0xffffffffffffffe1, 0x0, 0x0}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000040)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, 0x5, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}) [ 1337.142489] binder: 24480:24487 ioctl 89e3 0 returned -22 [ 1337.174027] binder: 24480:24487 ioctl 89e3 0 returned -22 [ 1337.233472] binder: 24492:24494 ioctl c0306201 20000180 returned -14 [ 1337.250100] binder: 24492:24494 ioctl c0306201 20000180 returned -14 13:57:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x12000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:20 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3201000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x60}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:20 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000]}], 0x3}}}) 13:57:20 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x500, 0x0) write$P9_RWALK(r0, &(0x7f0000000200)={0x64, 0x6f, 0x2, {0x7, [{0x80, 0x0, 0x1}, {0x0, 0x5, 0x5}, {0x24, 0x3, 0x8}, {0x40, 0x1}, {0x0, 0x2, 0x8}, {0x2, 0x0, 0x7}, {0x10, 0x4, 0x6}]}}, 0x64) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x201) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080), 0x4) write$selinux_attr(r1, &(0x7f0000000040)='system_u:object_r:devicekit_var_lib_t:s0\x00', 0x29) [ 1337.745141] binder: 24467:24469 ioctl c018620b 0 returned -14 13:57:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x1200}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:20 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), 0x4) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:20 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}], 0x3}}}) 13:57:20 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3300000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:20 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3ff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0x3, 0x4) socketpair(0x10, 0x5, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000480)={0x0, 0x200020000000b28}, &(0x7f0000000440)=0xa3) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r5, 0x323}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYBLOB="9c000000ba4055a8ffcf39040d4a4b724966802e10bc7a34bb38c1b33d39ad37da4fbe95760a0f2837623b5c8612fb50fa2f4f462966534632237e030628d2f013255be6bae816f8ca0022c8680d681fbed127d54b02000000282655ca0be60481440e9ac6f52fde1859ba67c8bfe51e60c412ae51496cc058797f67a1ab9408309a72f7a1599fd2b11974f019e07bdaf1017cf63d7d9bb150a4a5755fe9352f6044ea31a8ac"], &(0x7f0000000340)=0xa4) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'ip_vti0\x00', 0x200}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0x7) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000240)=r5, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1337.880017] binder: 24512:24513 ioctl c018620b 0 returned -14 [ 1337.951934] binder_alloc_new_buf_locked: 35 callbacks suppressed [ 1337.951947] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space 13:57:21 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}], 0x3}}}) [ 1338.033323] binder_alloc_new_buf_locked: 35 callbacks suppressed [ 1338.033340] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1338.059964] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1338.094269] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1338.129671] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1338.167993] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x20000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:21 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3301000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:21 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x102) r0 = syz_open_dev$binder(0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x2, 0x141400) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x2, 0x1f, 0x20, 0x6, 0xe, 0x0, 0x100000001, 0x0, 0x5, 0x9}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="a6f28e6c0fb24a84e0627c43"], 0xffffffffffffff89, 0x8000a0, &(0x7f00000000c0)="c9"}) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) 13:57:21 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x400000000000000]}], 0x3}}}) 13:57:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x3f00}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000002300000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 1338.668623] binder: 24512:24513 ioctl c018620b 0 returned -14 [ 1338.668768] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1338.682639] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1338.759984] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1338.788495] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1338.799717] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space 13:57:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000005000000000000000000000000852a6273000000000000000000000000000000001400000059671a28dfec5364159a904d649c11971a1674cc48403c3c4faf581d330000000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7e, 0x14001) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x200, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x7}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) [ 1338.809354] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1338.809572] binder: 24552:24556 ioctl c018620b 0 returned -14 13:57:21 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}], 0x3}}}) 13:57:21 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3400000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x6000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1338.855630] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1338.867681] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1338.931705] binder: 24552:24556 ioctl c018620b 0 returned -14 [ 1338.941479] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space 13:57:22 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], 0x3}}}) 13:57:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0xfdfdffff}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:22 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3401000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:22 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x40000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x600, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x8054) [ 1339.024290] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1339.154840] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1339.175933] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1339.192827] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space 13:57:22 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}], 0x3}}}) 13:57:22 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3500000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1339.204166] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1339.213394] binder: 24584:24589 ioctl c018620b 0 returned -14 13:57:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x1000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:22 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0x5) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x240, 0x0) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000180)) write$binfmt_misc(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xc9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000001000000000000000000000000480000000000dc7e0000180000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) sendfile(r1, r1, &(0x7f0000000000), 0x5) 13:57:22 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) 13:57:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x12000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:22 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}], 0x3}}}) 13:57:22 executing program 5: socket$inet_sctp(0x2, 0x3, 0x84) r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00634040b4663df8667b5688b37fb3675380a7e461dcf7329258841e6d4a92d85fe503ad9aba5e0b1fb333ffac65d14a90a8a2420000000000000000000000000000355f7783cc5fb57a7f399975e14aaf56ed7a9492aa306f8481c6f7588721ff34e1efeb1cc96e1028846d1eb30038bc280d7a919bd91b2951e852d979f49ed004498b533b81f3b7d87ce63e4603695ebaea3b723b19a483ef9e96e57154ec05d9f0be31984b71aa4963a38933a0d86ab313d885e6f12e1f940fd477aa0409fc562093eed7797f78bd4b"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="5868aa74e5dbb76b9c398a9d84168d1c687653a5d74b9a93f946693fdb5f488ba171d2b3b7951b40c53813a27ff54261a3ae2f8bfdd46853edca899e4361649d6d19d5a645758799a9c21e343caa356e8c3f41cf07a6858440c03c8c8e790a9737c87917b9bb6951e9e08648bac6264e2dbaeb9cba497f1b64f0bea4", 0x7c}, {&(0x7f0000000300)="e86b05d07e1f215a605a22da3868c89c633e4fe0d5ced31afeda31ea82876e6d5c3721435f5aea905bf1c880695c8f601060e184ae710644ab376803a6f91eada97eee55f496aea19bb366b198ac", 0x4e}], 0x2) 13:57:22 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3501000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0xfffffdfd}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:23 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}], 0x3}}}) 13:57:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x3f000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:23 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:23 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x10201, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:23 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3600000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1339.993345] binder: 24584:24589 ioctl c018620b 0 returned -14 13:57:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1340.077826] binder: 24635:24640 ioctl c018620b 0 returned -14 13:57:23 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}], 0x3}}}) 13:57:23 executing program 2: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1, 0x1) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r2 = mq_open(&(0x7f0000000000)=')eth1\x00', 0x40, 0x8, &(0x7f0000000180)={0x5, 0x8, 0x1919, 0x5, 0x2, 0xce, 0x100000000, 0xfffffffffffff000}) r3 = gettid() mq_notify(r2, &(0x7f00000002c0)={0x0, 0x1b, 0x0, @tid=r3}) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000100)={0xfffffffffffffffd, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r1, 0x500, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6b4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8045}, 0x2400c000) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-control\x00', 0x10000, 0x0) timer_create(0x4, &(0x7f0000000380)={0x0, 0x3b, 0x5, @tid=r3}, &(0x7f00000003c0)) ioctl$PPPIOCSCOMPRESS(r4, 0x4010744d) 13:57:23 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3601000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x60000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:23 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3700000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1340.286100] binder: 24645:24661 ioctl 660c 0 returned -22 [ 1340.295880] binder: 24645:24661 ioctl 660c 0 returned -22 13:57:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x100000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:23 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}], 0x3}}}) 13:57:23 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000000000800) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:23 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) recvfrom$packet(r0, &(0x7f0000000040)=""/161, 0xa1, 0x100, &(0x7f0000000140)={0x11, 0xe, r1, 0x1, 0x0, 0x6, @random="839a798c7f68"}, 0x14) syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000180)="bf404af6af3d8fc2045e9b35c3d29a2b", 0x10) 13:57:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0xfdfdffff}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:23 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3701000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1340.873496] binder: 24635:24640 ioctl c018620b 0 returned -14 13:57:24 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}], 0x3}}}) 13:57:24 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) shmget(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="4279accc5cd7273af5e809702f4121284d1b3883a9c50442018fd31510cb4e0e7f2a9d9f51d4218d71e650b94f94d794548105d050d1aa9444c3cce79685fd6b946adcc6ba694c4dc81229df4afa5765f9215d3225cbfbaed768a22f707646dc16eae2838b9e827a06bc50b9f8d32f17270406c41ec47651236e7585b9e1838bd66d706489a6d001e75fffffffd2dff5682b16149c0873395b7a5c13ea083ef02e0dce6e364ac897abfd5c03005a0bb0664074e5c283dbafd72b63b83a"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x6800, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000040)) 13:57:24 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3800000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0xfffffdfd}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1340.979527] binder: 24682:24688 ioctl c018620b 0 returned -14 13:57:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20000, 0x0) 13:57:24 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x2}], 0x3}}}) [ 1341.179482] binder: 24699:24706 unknown command -861111998 [ 1341.203413] binder: 24699:24706 ioctl c0306201 20000140 returned -22 [ 1341.268500] binder: 24699:24706 unknown command -861111998 [ 1341.291073] binder: 24699:24706 ioctl c0306201 20000140 returned -22 13:57:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x1200000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x100000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:24 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3801000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x7fffffff) 13:57:24 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x4}], 0x3}}}) 13:57:24 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xa0, 0x0, &(0x7f0000000500)=[@increfs, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/74, 0x4a, 0x2, 0x28}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/71, 0x47, 0x0, 0x3a}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/218, 0xda, 0x2, 0x33}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}, 0x1400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000480)={@flat=@weak_handle={0x77682a85, 0xb, 0x1}, @fda={0x66646185, 0x3, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100, 0x2}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}, 0x40}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) restart_syscall() [ 1341.770974] binder: 24682:24688 ioctl c018620b 0 returned -14 13:57:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x1200000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:24 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x1000000}], 0x3}}}) [ 1341.848683] binder: 24721:24724 ioctl 40087602 20000040 returned -22 [ 1341.879123] binder: 24725:24730 ioctl c018620b 0 returned -14 13:57:24 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='environ\x00') ioctl$NBD_SET_SIZE(r0, 0xab02, 0x8ee) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x5, 0xff, 0x3, 0x40}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000380)={r2, 0xfffffffffffffffc, 0xa, [0x0, 0x0, 0x92d1, 0xfffffffffffff995, 0x8001, 0x8000, 0x2, 0x5efc, 0x20, 0x1]}, &(0x7f00000003c0)=0x1c) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/validatetrans\x00', 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000200)=0x9, 0x4) r3 = syz_open_dev$binder(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="d36340a0"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x881, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000340)={0x41, 0x7, 0xad, &(0x7f0000000280)="a541850e08708ad1499cc43708f7f1d977e3312042ab47850c47fdfbbaafe62abaa37293852781a50340d2923e81df2fd3ca189dce7ba7ef1d608f98bc5ee32dc0fce687272670fd103b61d9834f74919c109b11c8f248d1935d6f23e16dfe7ef01253b2a09e8bc28c796232a467d446522c83cc7a57d83fba27b19ef7267b715adffc19794d87d4fa389452481c12be815334215762e931119a80e5ffb8715893e2036b378baf8f48f94a4b41"}) eventfd(0x8) 13:57:24 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3900000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1341.908927] binder: 24721:24731 ioctl 40087602 20000040 returned -22 13:57:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x3f00000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0xcb0, 0x300000000, 0xfffffffffffffff7, 0x800, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000006852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 1342.156358] binder: 24741:24743 unknown command -1606392877 [ 1342.187620] binder: 24751:24754 ioctl 801c581f 20000000 returned -22 [ 1342.188331] binder: 24741:24743 ioctl c0306201 20000140 returned -22 [ 1342.216564] binder: 24751:24754 ioctl 801c581f 20000000 returned -22 13:57:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x2000000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:25 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x2000000}], 0x3}}}) 13:57:25 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3901000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x6000000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ptrace$peek(0x2, r1, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:25 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="f79cbe491aebe2594a3a9b7a22e06cf1"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1342.667236] binder: 24725:24730 ioctl c018620b 0 returned -14 13:57:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0xfdfdffff00000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:25 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x4000000}], 0x3}}}) [ 1342.761880] binder: 24768:24772 ioctl c018620b 0 returned -14 [ 1342.764567] binder: 24764:24770 unknown command 1237228791 [ 1342.798275] binder: 24764:24770 ioctl c0306201 20000140 returned -22 13:57:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000018000000000000003000"/24]], 0x0, 0x0, 0x0}) 13:57:25 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3a00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:25 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x40) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000040)=""/13) 13:57:26 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x100000000000000}], 0x3}}}) [ 1343.022046] binder_alloc_new_buf_locked: 37 callbacks suppressed [ 1343.022056] binder_alloc: 13562: binder_alloc_buf size 8 failed, no address space [ 1343.045951] binder_alloc_new_buf_locked: 37 callbacks suppressed [ 1343.045965] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1343.107339] binder_alloc: 13562: binder_alloc_buf size 8 failed, no address space [ 1343.115626] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0xfdfdffff00000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:26 executing program 2: 13:57:26 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3a01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:26 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x200000000000000}], 0x3}}}) 13:57:26 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00624040d369c9bdb7cef15d45c4e0478ab9e645cf2dde5138714069ea25e85ee2255518c1725e7db513706f6bc3fa130fbb7c368156eb3e017200000000000000"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1343.553833] binder: 24768:24772 ioctl c018620b 0 returned -14 [ 1343.554052] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1343.568745] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1343.618262] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1343.643979] binder: 24803:24808 unknown command 1077961216 [ 1343.660365] binder: 24803:24808 ioctl c0306201 20000140 returned -22 13:57:26 executing program 2: 13:57:26 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x400000000000000}], 0x3}}}) [ 1343.669978] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1343.701839] binder: 24812:24814 ioctl c018620b 0 returned -14 [ 1343.711938] binder: 24803:24815 unknown command 1077961216 13:57:26 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3b00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x60}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1343.745330] binder: 24803:24815 ioctl c0306201 20000140 returned -22 [ 1343.791385] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1343.799240] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:26 executing program 2: 13:57:26 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7f, 0x2) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@remote={[], 0x0}, 0x6, 'teql0\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1343.885241] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1343.920188] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1344.016199] binder_alloc: 13562: binder_alloc_buf size 8 failed, no address space [ 1344.027594] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1344.049221] binder_alloc: 13562: binder_alloc_buf size 8 failed, no address space [ 1344.076579] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x12}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:27 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x2}], 0x3}}}) 13:57:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x1200}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:27 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3b01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:27 executing program 2: 13:57:27 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2) getresuid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)=0x0) r2 = getegid() chown(&(0x7f0000000500)='./file0\x00', r1, r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x5, &(0x7f0000000480)=[{&(0x7f0000000100)="69960a39", 0x4, 0x526940a}, {&(0x7f0000000200)="21cd528a75401473f087733e3cf14a5e8604b5b761ab3735236b10b06dea617bf7c92908917eaf1bf02367f3ad8a629c1bb5a23f256f8a2730aa7e46173795f194a42907f9e59be887e2f125bb3fb794a4cfc28d401239e9c0c385c68d7b93c7af2678ab3ef8d6babd2844ae616326964d893126c99cffec91e582df61b62a0ddb6ab1bfc73ee55e7db02a4168d743c6939e0c7659a17c5e7af80e73ee8e81366c069ca66e119fe4894db39be51754b440326f5246477f399207b49bc6d3f739a6b823c800832987aa385d1636aaff12d7a9d5c59b183f95d9e3", 0xda, 0x1}, {&(0x7f0000000180)="6ced5040c573a9af435600fa06950ea9ce04b8ab7977f7d8de6c1e563fd375c027df17e302679a", 0x27, 0x5}, {&(0x7f0000000300)="a8e2a4fdebf5a7195cb0f52b3921637b5258af9a5db4747680951b2b65c970f3952e3fea7f2b7f1b4abd0df8eb7ceb74a76ba3ce17eb04a954a71f1059a1b1d3543baf8f97d2d010eb53ce2d08f837959a07b0e9e8b72f38aa40c04b456d6500", 0x60, 0x894}, {&(0x7f0000000380)="2ff69f3d33663e691108b192913c12ae791a8cb45664460fbcf2994a7464eecc53f8d95cece001c02e974d1ce6f21d02d3880a17a2eaf50f7ab9d2f1af6c9584d0d9d06f4fe1126b0f24cc970b27c7c44bedf96bf4b2487118f98db3266c8869cf8d76d8a8087cc7eb1a44305f1352a4946037395ed3d3ad432a6fa72b04741ced266cfa2583e54d4797d295fb1319b6a1233911d514fb9df60b9fbd8ac746b4c2ddb8fcae007c82fd5da4294c67ca7a9cca127fc5a9b5df2578b339abb903558510f0e5f82e8eee6ac586e7796dccc6d489981e53ce781101ae08ee7210d2cbc6daaee2", 0xe4, 0x1}], 0x4, 0x0) [ 1344.499940] binder: 24812:24814 ioctl c018620b 0 returned -14 [ 1344.500154] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1344.515247] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:27 executing program 2: [ 1344.599523] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1344.611020] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:27 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x4}], 0x3}}}) [ 1344.649596] binder: 24850:24852 ioctl c018620b 0 returned -14 13:57:27 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3c00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x3f00}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1344.692816] BFS-fs: bfs_fill_super(): No BFS filesystem on loop5 (magic=9ff62f00) 13:57:27 executing program 2: 13:57:27 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x1000000}], 0x3}}}) [ 1344.806029] BFS-fs: bfs_fill_super(): No BFS filesystem on loop5 (magic=9ff62f00) 13:57:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x1200}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x6000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:28 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) shmget$private(0x0, 0x1000, 0x54000443, &(0x7f0000ffd000/0x1000)=nil) 13:57:28 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3c01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:28 executing program 2: 13:57:28 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x2000000}], 0x3}}}) [ 1345.448237] binder: 24850:24852 ioctl c018620b 0 returned -14 13:57:28 executing program 2: 13:57:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x1000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:28 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x4000000}], 0x3}}}) 13:57:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) write$binfmt_elf32(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x0, 0x8000, 0x7, 0x9, 0x0, 0x3, 0x8, 0x92, 0x38, 0x24d, 0x6, 0x5d5, 0x20, 0x2, 0x3ff, 0x5, 0x4}, [{0x4, 0x5, 0x100000000, 0x55f0, 0xffff, 0x9, 0x1, 0x8}], "29246410377e14c447eb51f21282379f909e473b25c2233d32cb725f8bcd8761e2969d82a87bd096bc8fd1b0b9fdc671ebaeae8835bb6b73069800", [[], [], [], [], [], [], [], [], [], []]}, 0xa93) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) r2 = syz_open_dev$usb(&(0x7f0000000c40)='/dev/bus/usb/00#/00#\x00', 0xff, 0x240040) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400) inotify_rm_watch(r2, r3) [ 1345.568652] binder: 24891:24897 ioctl c018620b 0 returned -14 13:57:28 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3d00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:28 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x2000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:29 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x100000000000000}], 0x3}}}) 13:57:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x12000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:29 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3d01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:29 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x212080, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0xba, "931ddb48eddc955f9ba0f75b656146d33c8a30e841dcf9f10e64a8debf517fd3ad4e71328f707b410c88b2bc6a7988c2409cf258cfbc86d50fb22134508cba154c3d1de47e2070566c1880317960541ff4c5b86b147827e7ce6d04b5edec6684ac8fd61cd29cc1a0f947bb0503bece6bf6c3a27c14bcbc90c0b180f3772a751343ed52c6790dc57f88319c3357b3537afc04fc3db4b718c79c1b56f25f16583dd3cb12af439d3e26667c69036f8bbe0fe280a87d01904477c567"}, &(0x7f0000000100)=0xc2) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r1, 0x7, 0x8, [0x6492, 0x2, 0x7fff, 0x6, 0x7, 0xfffffffffffffff8, 0x7, 0x1]}, &(0x7f0000000300)=0x18) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:29 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1346.367107] binder: 24891:24897 ioctl c018620b 0 returned -14 13:57:29 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x200000000000000}], 0x3}}}) 13:57:29 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x3f000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:29 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3e00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1346.526904] binder: 24933:24939 ioctl c018620b 0 returned -14 [ 1346.589610] binder: 24933:24939 ioctl c018620b 0 returned -14 13:57:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x1000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x60000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:29 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x400000000000000}], 0x3}}}) 13:57:29 executing program 2: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:29 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040)=0x9, 0x4) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:29 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3e01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1346.846484] binder: 24959:24966 ioctl c018620b 0 returned -14 13:57:30 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x2]}], 0x3}}}) [ 1346.916936] binder: 24959:24966 ioctl c018620b 0 returned -14 13:57:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0xfdfdffff}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:30 executing program 2: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:30 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x24080, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x401, @local, 0xfffffffffffff800}, @in={0x2, 0x5, @rand_addr=0x5}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0x101, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x68) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x12000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:30 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3f00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0xfffffdfd}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:30 executing program 2: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1347.164268] binder: 24988:24993 ioctl c018620b 0 returned -14 13:57:30 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x4]}], 0x3}}}) 13:57:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x180000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, 0xf, 0xffffffff, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) 13:57:30 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x3f01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x100000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:30 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:30 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x1000000]}], 0x3}}}) [ 1347.464232] binder: 25011:25017 ioctl 89e8 20000000 returned -22 13:57:30 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4000000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:30 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x40) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x20000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x1200000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:31 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:31 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4001000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:31 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x2000000]}], 0x3}}}) 13:57:31 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x20801, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x120, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x68, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa918}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x64}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4d48}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xce79}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x84a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc91}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffff0001}]}]}, 0x120}}, 0x8000) syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x805) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1347.962262] binder: 24988:24993 ioctl c018620b 0 returned -14 13:57:31 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x3f00000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:31 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4100000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1348.073574] binder_alloc_new_buf_locked: 32 callbacks suppressed [ 1348.073585] binder_alloc: 13562: binder_alloc_buf size 8 failed, no address space [ 1348.099826] binder: 25049:25053 ioctl c018620b 0 returned -14 13:57:31 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x4000000]}], 0x3}}}) [ 1348.140303] binder_alloc_new_buf_locked: 32 callbacks suppressed [ 1348.140320] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1348.191596] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1348.231084] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:31 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x143000, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x2f09) syz_open_dev$binder(0x0, 0x0, 0x2) [ 1348.252982] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1348.267371] binder: 25049:25053 ioctl c018620b 0 returned -14 [ 1348.289351] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:31 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4101000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0xfdfdffff}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:31 executing program 2: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x6000000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:31 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x400000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:31 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x100000000000000]}], 0x3}}}) [ 1348.479030] binder: 25078:25081 ioctl c018620b 0 returned -14 13:57:31 executing program 2: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1348.528082] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space 13:57:31 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4200000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1348.590939] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1348.618127] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space 13:57:31 executing program 2: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1348.637899] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0xfdfdffff00000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1348.691214] binder_alloc: 13562: binder_alloc_buf size 8 failed, no address space [ 1348.698919] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0xfffffdfd}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:31 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x200000000000000]}], 0x3}}}) 13:57:31 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) [ 1348.805304] binder_alloc: 13562: binder_alloc_buf size 8 failed, no address space [ 1348.846744] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1348.880022] binder: 25108:25112 ioctl c018620b 0 returned -14 13:57:31 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4201000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1348.890179] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space 13:57:32 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000c2024246b7dd0e59d10080"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1348.938279] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:32 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x400000000000000]}], 0x3}}}) [ 1348.989350] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1349.012657] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:32 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:57:32 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4300000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:32 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x2]}], 0x3}}}) [ 1349.148699] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1349.161011] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1349.178784] binder: 25125:25133 unknown command 46268416 [ 1349.198491] binder: 25125:25133 ioctl c0306201 20000140 returned -22 13:57:32 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:57:32 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4301000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x60}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x100000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:32 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x2f, @local, 0x4e23, 0x1, 'wlc\x00', 0x2, 0x8, 0x58}, 0x2c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000180)={@multicast2, @broadcast, @rand_addr=0x3}, 0xc) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000200)={0xfffffffffffffff8, 0x4}) 13:57:32 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x4]}], 0x3}}}) 13:57:32 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x0, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:32 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4400000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1349.659464] binder: 25108:25112 ioctl c018620b 0 returned -14 13:57:32 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x0, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1349.751375] binder: 25155:25161 unknown command 0 13:57:32 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x1000000]}], 0x3}}}) 13:57:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x1200}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:32 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4401000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1349.788730] binder: 25155:25161 ioctl c0306201 20000140 returned -22 [ 1349.820247] binder: 25164:25170 ioctl c018620b 0 returned -14 13:57:32 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00c332e6f5ae010bd5dbaf9a226c07ec88634040e5d485208dd57412ae3bba104970cb36ff460d792cf93a699363a2c22f72a728dc63338df2cd26c093038c3e79282e637a44b601c936142e00c816be9c44b71da5c6700b908b9efdccb26b3577df1079"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:33 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x2000000]}], 0x3}}}) 13:57:33 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x0, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1350.031780] binder: 25185:25186 unknown command -432880896 [ 1350.061174] binder: 25185:25186 ioctl c0306201 20000140 returned -22 [ 1350.111758] binder: 25185:25194 unknown command -432880896 [ 1350.128059] binder: 25185:25194 ioctl c0306201 20000140 returned -22 13:57:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x1200000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x3f00}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:33 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4500000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:33 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x4000000]}], 0x3}}}) 13:57:33 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x7, 0x1, {{0x1, '^'}, 0x6}}, 0xe) readlinkat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/227, 0xe3) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040), 0x4802) [ 1350.610665] binder: 25164:25170 ioctl c018620b 0 returned -14 13:57:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x6000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:33 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4501000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:33 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@/'], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:33 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1350.725501] binder: 25205:25213 ioctl c018620b 0 returned -14 13:57:33 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x100000000000000]}], 0x3}}}) [ 1350.892829] binder: 25219:25225 unknown command 792748800 [ 1350.911587] binder: 25219:25225 ioctl c0306201 20000140 returned -22 13:57:33 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1350.939117] binder: 25219:25229 unknown command 792748800 [ 1350.946469] binder: 25219:25229 ioctl c0306201 20000140 returned -22 13:57:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x2000000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:34 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4600000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x1000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:34 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x549202, 0x0) connect$rose(r1, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @bcast}, 0x1c) 13:57:34 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x200000000000000]}], 0x3}}}) 13:57:34 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x3}}}) [ 1351.519454] binder: 25205:25213 ioctl c018620b 0 returned -14 13:57:34 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4601000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:34 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x400000000000000]}], 0x3}}}) 13:57:34 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x3}}}) 13:57:34 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c472f70800000000000000c54a6fcd6a542e0ca3164e519083b391a61e391c9a1bd9d39cb4e008fcb3bfb8a63600"/58], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x12000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1351.662280] binder: 25248:25254 ioctl c018620b 0 returned -14 13:57:34 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4700000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1351.794578] binder: 25257:25264 unknown command 150434500 [ 1351.819243] binder: 25257:25264 ioctl c0306201 20000140 returned -22 [ 1351.860069] binder: 25257:25272 unknown command 150434500 [ 1351.910457] binder: 25257:25272 ioctl c0306201 20000140 returned -22 13:57:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0xfdfdffff00000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x3f000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:35 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x2]}], 0x3}}}) 13:57:35 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x3}}}) 13:57:35 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4701000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:35 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000200)=""/111) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1352.445382] binder: 25248:25254 ioctl c018620b 0 returned -14 13:57:35 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}]}}}) 13:57:35 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x4]}], 0x3}}}) 13:57:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x60000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r0, 0x80000) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000200)=""/4096) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xe80, 0x10) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:35 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4800000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1352.608686] binder: 25293:25297 ioctl c018620b 0 returned -14 [ 1352.711906] binder: 25293:25297 ioctl c018620b 0 returned -14 13:57:35 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}]}}}) 13:57:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x12, &(0x7f00000003c0)}) 13:57:35 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x1000000]}], 0x3}}}) 13:57:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0xfdfdffff}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:35 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4801000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:35 executing program 5: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@ipx, &(0x7f0000000100)=0x80, 0x800) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x20, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x24}}, 0x4}}, 0x7, 0x8}, &(0x7f0000000300)=0x90) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000340)={r1, 0x401, 0xffffffff, 0x5, 0x5, 0x9, 0x0, 0x800, {r2, @in={{0x2, 0x4e23, @remote}}, 0x2, 0x3, 0x2, 0x3, 0x100000000}}, &(0x7f0000000400)=0xb0) syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1352.930460] binder: 25320:25324 ioctl c018620b 0 returned -14 13:57:36 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}]}}}) 13:57:36 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x2000000]}], 0x3}}}) 13:57:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0xfffffdfd}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:36 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4900000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1353.089442] binder_alloc_new_buf_locked: 24 callbacks suppressed [ 1353.089454] binder_alloc: 13562: binder_alloc_buf size 8 failed, no address space [ 1353.167721] binder_alloc_new_buf_locked: 24 callbacks suppressed [ 1353.167738] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1353.195360] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space 13:57:36 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x4000000]}], 0x3}}}) 13:57:36 executing program 2 (fault-call:1 fault-nth:0): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1353.217792] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1353.240382] binder_alloc: 13562: binder_alloc_buf size 8 failed, no address space [ 1353.250422] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x100000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1353.364445] FAULT_INJECTION: forcing a failure. [ 1353.364445] name failslab, interval 1, probability 0, space 0, times 0 [ 1353.432207] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1353.440371] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1353.440882] CPU: 1 PID: 25355 Comm: syz-executor.2 Not tainted 4.19.51 #23 [ 1353.456182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1353.465564] Call Trace: [ 1353.468187] dump_stack+0x172/0x1f0 [ 1353.471837] should_fail.cold+0xa/0x1b [ 1353.475755] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1353.480884] ? lock_downgrade+0x810/0x810 [ 1353.485068] ? ___might_sleep+0x163/0x280 [ 1353.489242] __should_failslab+0x121/0x190 [ 1353.489263] should_failslab+0x9/0x14 [ 1353.489285] kmem_cache_alloc_node_trace+0x274/0x720 [ 1353.497333] ? kasan_check_read+0x11/0x20 [ 1353.497360] __kmalloc_node+0x3d/0x80 [ 1353.497380] kvmalloc_node+0x68/0x100 [ 1353.514273] video_usercopy+0x454/0x10c0 [ 1353.518376] ? v4l_s_fmt+0x9c0/0x9c0 [ 1353.522153] ? v4l_enumstd+0x70/0x70 [ 1353.525905] ? mark_held_locks+0x100/0x100 [ 1353.530167] ? proc_cwd_link+0x1d0/0x1d0 [ 1353.534250] ? __fget+0x340/0x540 [ 1353.537705] ? video_usercopy+0x10c0/0x10c0 [ 1353.542035] video_ioctl2+0x2d/0x35 [ 1353.545667] v4l2_ioctl+0x150/0x1b0 [ 1353.549290] ? video_devdata+0xa0/0xa0 [ 1353.553185] do_vfs_ioctl+0xd5f/0x1380 [ 1353.557109] ? selinux_file_ioctl+0x46f/0x5e0 [ 1353.561618] ? selinux_file_ioctl+0x125/0x5e0 [ 1353.566109] ? ioctl_preallocate+0x210/0x210 [ 1353.570523] ? selinux_file_mprotect+0x620/0x620 [ 1353.575298] ? iterate_fd+0x360/0x360 [ 1353.579099] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1353.584723] ? fput+0x128/0x1a0 [ 1353.588018] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1353.593551] ? security_file_ioctl+0x8d/0xc0 [ 1353.597981] ksys_ioctl+0xab/0xd0 [ 1353.601426] __x64_sys_ioctl+0x73/0xb0 [ 1353.605331] do_syscall_64+0xfd/0x620 [ 1353.609154] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1353.614349] RIP: 0033:0x4592c9 [ 1353.617530] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1353.636516] RSP: 002b:00007f4349462c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1353.644247] RAX: ffffffffffffffda RBX: 00007f4349462c90 RCX: 00000000004592c9 [ 1353.651510] RDX: 0000000020000040 RSI: 00000000c100565c RDI: 0000000000000003 [ 1353.658780] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1353.666058] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f43494636d4 [ 1353.673319] R13: 00000000004c4241 R14: 00000000004d7ee0 R15: 0000000000000004 13:57:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x1200, &(0x7f00000003c0)}) 13:57:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101000) splice(r2, &(0x7f0000000440), r0, &(0x7f0000000480)=0xc, 0x69d, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r2, 0x0, 0x10, &(0x7f0000000100)='vboxnet0^]wlan0\x00'}, 0x30) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000580)={@initdev, @empty, 0x0}, &(0x7f00000005c0)=0xc) bind$can_raw(r2, &(0x7f0000000600)={0x1d, r5}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000280)={{0x8, 0x5, 0x0, 0x10000, '\x00', 0x200}, 0x4, 0x231, 0x956, r3, 0x8, 0x1f, 'syz0\x00', &(0x7f0000000200)=['/dev/binder#\x00', '/dev/input/mice\x00', '/dev/binder#\x00', 'wlan0em1-\x00', '.\\\x00', '/dev/input/mice\x00', '/dev/binder#\x00', '/dev/binder#\x00'], 0x61, [], [0x10000, 0x1, 0xff, 0x3]}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000040)=ANY=[@ANYBLOB="030000000c000000402000000600000016000000"]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1603d9d94000634040"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000004c0)={0x0, @bt={0x7, 0x7fff, 0x1, 0x2, 0x8, 0xffffffffffff366e, 0x400, 0x2f5a, 0x1, 0x8000, 0x81, 0x0, 0x5, 0x6, 0x0, 0x26}}) fstat(r4, &(0x7f00000003c0)) 13:57:36 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4901000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:36 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x100000000000000]}], 0x3}}}) 13:57:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x1200000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:36 executing program 2 (fault-call:1 fault-nth:1): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1353.725610] binder: 25320:25331 ioctl c018620b 0 returned -14 [ 1353.733073] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1353.746740] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:36 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:36 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4a00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1353.834039] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1353.867356] binder: BINDER_SET_CONTEXT_MGR already set [ 1353.869710] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1353.899564] binder: 25365:25375 ioctl 40046207 0 returned -16 [ 1353.906984] binder: 25374:25377 ioctl c018620b 0 returned -14 13:57:37 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x200000000000000]}], 0x3}}}) 13:57:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x3f00000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1353.949268] binder: 25365:25375 unknown command -640089322 [ 1353.972660] binder: 25365:25375 ioctl c0306201 20000140 returned -22 [ 1353.982226] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1354.011160] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:37 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x2, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:37 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4a01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1354.089746] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1354.100590] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x2000, &(0x7f00000003c0)}) 13:57:37 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x400000000000000]}], 0x3}}}) 13:57:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0x6000000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:37 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x4b47, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:37 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x1, 0x7, 0x1}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000100)=0x4) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000000) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:37 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4b00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1354.689709] binder: 25374:25377 ioctl c018620b 0 returned -14 [ 1354.695190] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1354.704447] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1354.775707] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1354.799589] binder: 25408:25416 unknown command 760936862 13:57:37 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x2]}], 0x3}}}) 13:57:37 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x4b49, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:37 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4b01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x73622a85, 0x0, 0x0, 0xfdfdffff00000000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1354.821066] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1354.840113] binder: 25415:25419 ioctl c018620b 0 returned -14 [ 1354.851485] binder: 25408:25416 ioctl c0306201 20000140 returned -22 13:57:38 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3, 0x4, [0x0, 0x9, 0x2c, 0xfffffffffffffffb]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={r0, 0x3, 0x5, [0xe51, 0x8, 0x9, 0x400, 0xfffffffffffffff9]}, &(0x7f0000000180)=0x12) r1 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x22db, 0x100) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x84000, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000300)={r0, 0x1, 0x3ff, 0x8, 0x2230}, &(0x7f0000000340)=0x14) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={r0, 0x5}, &(0x7f0000000280)=0x8) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000380)={0xe7e7, 0x2}) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:38 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}], 0x3}}}) 13:57:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x1000000, &(0x7f00000003c0)}) 13:57:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x12, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:38 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x541b, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:38 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:38 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4c00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:38 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000]}], 0x3}}}) [ 1355.635836] binder: 25415:25419 ioctl c018620b 0 returned -14 13:57:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x60, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:38 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5421, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x802) syz_open_dev$binder(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xd) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000040)={0x80fd, 0x3}) 13:57:38 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x2000000]}], 0x3}}}) 13:57:38 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4c01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1355.775438] binder: 25456:25462 ioctl c018620b 0 returned -14 [ 1355.845750] binder: 25456:25462 ioctl c0306201 20000440 returned -14 [ 1355.922016] binder: 25456:25462 ioctl c018620b 0 returned -14 13:57:39 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5450, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x12000000, &(0x7f00000003c0)}) 13:57:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x1200, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:39 executing program 5: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x400) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000180)={0x4, 0x3f, 0xc434, [], &(0x7f0000000040)={0xbf0bff, 0x1000, [], @ptr=0x7c}}) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f00000001c0)={0x1, 0x0, {0x3ff, 0xc007, 0x3007, 0x8, 0x0, 0x4, 0x1}}) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00694040f2b429a648dca662957e1a98ae1aef371ef7a074b78d938052500d18e3078ce2040641f1b2583246b93b50b2caa7e11e55c4b412e228393057db9119aeb29eb8c244a41370bbafc97e6bf66575ac7e08418621e24de12311666b6fbf9a0dfd701e87dbfcd1e3401330e7263eab07fc9bd532b1ca17f5add1ae4f564135a7f7b7b7a5700443a7ff8c2a2052ea067ecf7b1c8f82a2fd54c7c272ba4c0492f9a15741a78a6ecc88d292fdca6a151db8de3e761bae4840af5bd5536b80"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) setsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000240)=0x7, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000003c0)={0x80000000, 0x100, "a1092db68edae3a841f8d9e1969d89982d90e3c5000400", 0x8, 0x6, 0x5, 0x5, 0x1000, 0xfff, 0x1, 0xffffffffffffff7f, [0x9b1, 0x0, 0x2, 0x9]}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000380)={0x8, 0x3ff, 0xcc, &(0x7f0000000280)="b77065417f392cd62560c9145410dc35f8abb6fb9bcc941a022efb351e0563db141db2795e3a4265b03db2fff376e27ed9b85e72c379c56693d014f038ec8120e9ae759910a87b97fa015b984bdb6f98b52f353b82bba21945bffebc0381e1022dab97c20492df85b5f5b0f20554f7671fc3b8a0f2463cf599d73ba0071b91c6dc0ef9a1abca130581867819550c99a7258fc8434d9e02c6f9a11c9e9e696bdc28dbe7a9703373995706e2e384a1d2593cdbc8d506709d628469e079c562d5ab64ac21a8ee447e2c08ed6ebe"}) 13:57:39 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4d00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:39 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x4000000]}], 0x3}}}) 13:57:39 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5451, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1356.169116] binder: 25489:25495 ioctl c018620b 0 returned -14 13:57:39 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x2, 0x400}) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:39 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x100000000000000]}], 0x3}}}) 13:57:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x3f00, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:39 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4d01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1356.259925] binder: 25489:25503 ioctl c0306201 20000440 returned -14 13:57:39 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5452, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:39 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4e00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x6000, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:40 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x200000000000000]}], 0x3}}}) 13:57:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x20000000, &(0x7f00000003c0)}) 13:57:40 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:40 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5460, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:40 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4e01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1356.968644] binder: 25489:25495 ioctl c018620b 0 returned -14 [ 1356.969947] binder: 25489:25503 ioctl c0306201 20000440 returned -14 13:57:40 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x400000000000000]}], 0x3}}}) [ 1357.077720] binder: 25532:25543 unknown command 0 13:57:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x1000000, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:40 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045612, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:40 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4f00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1357.119221] binder: 25532:25543 ioctl c0306201 20000140 returned -22 [ 1357.129223] binder: 25541:25545 ioctl c018620b 0 returned -14 [ 1357.194863] binder: 25541:25550 ioctl c0306201 20000440 returned -14 13:57:40 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}], 0x3}}}) [ 1357.241662] binder: 25532:25556 unknown command 0 [ 1357.246575] binder: 25532:25556 ioctl c0306201 20000140 returned -22 13:57:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x12000000, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:40 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$notify(r0, 0x402, 0x4) syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:40 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40045613, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:40 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}], 0x3}}}) 13:57:40 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x4f01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:40 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40049409, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0xfdfdffff, &(0x7f00000003c0)}) 13:57:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x3f000000, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) userfaultfd(0x80000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000100)=0x4) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$getflags(r0, 0x401) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1357.918934] binder: 25541:25545 ioctl c018620b 0 returned -14 [ 1357.919824] binder: 25541:25550 ioctl c0306201 20000440 returned -14 13:57:41 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40086602, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:41 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}], 0x3}}}) 13:57:41 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5000000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x60000000, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1358.105845] binder: 25591:25594 ioctl c018620b 0 returned -14 13:57:41 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300), 0x28, 0x8000a0, &(0x7f0000000380)="2948a1a422f0bd010000185a338ab0b97cb1f8ff09b264b2222272861a1cafffad474305b80cd1cb"}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x20) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x8000, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000280)={0x3, 0x1, @start={0x100000000, 0x1}}) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="6141d6602d3010e1f3aff29041557eef"}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x4004080) write$ppp(r1, &(0x7f00000003c0)="13a492e0e1609652f49faf9e19552e844aeaa85af0698592896a4ef562c9693dd2c12003f1ee7700e32d23b668f998ee1f18c18dc49a35bb6f3c916ea5cd0c696d1133aa40910cf405fc63562fbfb37048d0dd6877d6f691661467fa395d7b58703b644154ccd8994be1eb323fa30b4fa534e24e1d07ebbf79ec90048e26a528b9ab8867829973a6559744f4a9ad2722940d7702cdb34d4c0ba92eb17a42f5374ebcf18444ff2cea0b55d9aa21e129ae6dbce06922c68e847f3a4d55b4c897d8b36a209603280eb4679e912dd3389ab7c6fd12", 0xd3) [ 1358.183747] binder_alloc_new_buf_locked: 20 callbacks suppressed [ 1358.183757] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space 13:57:41 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}], 0x3}}}) 13:57:41 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40087602, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1358.273724] binder_alloc_new_buf_locked: 20 callbacks suppressed [ 1358.273743] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1358.298708] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1358.310579] binder: 25591:25594 ioctl c0306201 20000440 returned -14 [ 1358.344194] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1358.381595] binder: 25591:25594 ioctl c018620b 0 returned -14 13:57:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0xfffffdfd, &(0x7f00000003c0)}) 13:57:41 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5001000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x250040, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000fae6767ff1133634040"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:41 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000]}], 0x3}}}) 13:57:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0xfdfdffff, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:41 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x4020940d, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1358.546008] binder: 25630:25631 ioctl c018620b 0 returned -14 [ 1358.582323] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space 13:57:41 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x80086601, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:41 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5100000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:41 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}], 0x3}}}) [ 1358.594077] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1358.641533] binder: 25635:25636 unknown command 1739460352 [ 1358.668821] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space 13:57:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0xfffffdfd, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1358.693394] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1358.722107] binder: 25635:25636 ioctl c0306201 20000140 returned -22 [ 1358.765981] binder: 25630:25639 ioctl c0306201 20000440 returned -14 [ 1358.801310] binder: 25635:25651 unknown command 1739460352 [ 1358.807892] binder: 25635:25651 ioctl c0306201 20000140 returned -22 13:57:41 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x80087601, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:41 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5101000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1358.817226] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1358.832215] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x100000000000000, &(0x7f00000003c0)}) 13:57:42 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}], 0x3}}}) 13:57:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x100000000000000, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:42 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0045878, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:42 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5200000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:42 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000, 0x0) finit_module(r0, &(0x7f0000000040)='\x00', 0x1) syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1359.345665] binder: 25630:25631 ioctl c018620b 0 returned -14 [ 1359.346920] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1359.359400] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1359.368300] binder: 25630:25639 ioctl c0306201 20000440 returned -14 [ 1359.410155] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1359.419383] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:42 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0045878, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1359.466185] binder: 25673:25677 ioctl c018620b 0 returned -14 [ 1359.481845] binder_alloc: 13562: binder_alloc_buf size 8 failed, no address space 13:57:42 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x400000000000000]}], 0x3}}}) 13:57:42 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5201000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x1200000000000000, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1359.517493] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1359.583617] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space 13:57:42 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:42 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}], 0x3}}}) [ 1359.624771] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1359.675213] binder: 25673:25681 ioctl c0306201 20000440 returned -14 [ 1359.682208] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1359.711030] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x1200000000000000, &(0x7f00000003c0)}) 13:57:43 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@B'], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x3f00000000000000, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:43 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5300000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:43 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], 0x3}}}) 13:57:43 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1360.254434] binder: 25673:25677 ioctl c018620b 0 returned -14 [ 1360.255320] binder: 25673:25681 ioctl c0306201 20000440 returned -14 [ 1360.306222] binder: 25704:25709 unknown command 1111515904 13:57:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x6000000000000000, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:43 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}], 0x3}}}) [ 1360.354573] binder: 25704:25709 ioctl c0306201 20000140 returned -22 [ 1360.392467] binder: 25704:25717 unknown command 1111515904 [ 1360.396665] binder: 25716:25718 ioctl c018620b 0 returned -14 13:57:43 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1360.399016] binder: 25704:25717 ioctl c0306201 20000140 returned -22 13:57:43 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5301000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:43 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}], 0x3}}}) [ 1360.482418] binder: 25716:25725 ioctl c0306201 20000440 returned -14 13:57:43 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00634040277c4c21024c8e6076e0a8f619378a6dbf7798086fe8abb9c785e56a174366fbb3a6940977e6e7a909458804b070237b8e91ee28bc16046d04e3ff646fa1520fd2f61e92a0e3a2a59f96a94bc9"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1360.542452] binder: 25716:25718 ioctl c018620b 0 returned -14 13:57:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x2000000000000000, &(0x7f00000003c0)}) 13:57:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0xfdfdffff00000000, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:43 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0205649, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:43 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}], 0x3}}}) 13:57:43 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00e5bbe0ceae6315299d142d63409661d0270f526081821ff68102fbb53d4e5fe99d2a727d5b5fef56464175b7649f1c0f4a4edd42142e43445008ab5ff3897ed0db5817d1abec900e3b68930b530b18caf326d448a68397777ca9105df545945b77d677370ce907c7"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:43 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5400000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x60, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:43 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc020660b, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1360.812854] binder: 25749:25751 ioctl c018620b 0 returned -14 13:57:43 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}], 0x3}}}) [ 1360.890719] binder: 25749:25751 ioctl c0306201 20000440 returned -14 [ 1360.925302] binder: 25755:25762 unknown command -524557056 13:57:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x20000470}}}], 0x0, 0x0, 0x0}) [ 1360.949451] binder: 25755:25762 ioctl c0306201 20000140 returned -22 13:57:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0xfdfdffff00000000, &(0x7f00000003c0)}) 13:57:44 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0285628, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:44 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5401000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:44 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280), 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:44 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}], 0x3}}}) 13:57:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x12, 0x0, 0x0}) [ 1361.144727] binder: 25777:25779 ioctl c018620b 0 returned -14 13:57:44 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0285629, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:44 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="050000007601ca00f9bed6000001000000f94bcbb3bf430000"]}) 13:57:44 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5500000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1361.270137] binder: 25777:25793 ioctl c0306201 20000440 returned -14 [ 1361.287032] binder: 25790:25794 ioctl c0306201 20000440 returned -14 13:57:44 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}], 0x3}}}) 13:57:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x60, 0x0, 0x0}) 13:57:44 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1361.453822] binder: 25800:25805 ioctl 8946 20000040 returned -22 [ 1361.486240] binder: 25807:25811 ioctl c0306201 20000440 returned -14 13:57:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000002c0)=0x3, 0x4) readahead(r2, 0x3, 0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x3, 0x30}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r4, 0x81}, &(0x7f00000001c0)=0x8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="000000000042c60000000000000000000000000000000000bd29ea63155415b35d7fcebb8cbf72d43b664529779dee221b6dccf6888e36ccd47d24c871450eba38ff1080edf2959821d11c08a2f1b38e651b395710e3021c67b9609e87f7b6707d4ac1c47a676cea037d81da561acad9895a"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:44 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5501000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:44 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x2}], 0x3}}}) 13:57:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x0) 13:57:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x1200, 0x0, 0x0}) 13:57:44 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1361.919798] binder: 25777:25779 ioctl c018620b 0 returned -14 [ 1361.920706] binder: 25777:25793 ioctl c0306201 20000440 returned -14 13:57:45 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x4}], 0x3}}}) 13:57:45 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058560f, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1362.020134] binder: 25821:25832 ioctl c0306201 20000440 returned -14 13:57:45 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5600000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:45 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='wlan0.\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x200) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x81, 0x100000001}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={r2, 0x2, 0x7, 0x20}, &(0x7f0000000240)=0x10) 13:57:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x3f00, 0x0, 0x0}) [ 1362.175892] binder: 25833:25840 ioctl c018620b 0 returned -14 13:57:45 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x1000000}], 0x3}}}) [ 1362.216310] binder: 25833:25840 ioctl c0306201 20000540 returned -11 [ 1362.281701] binder: 25833:25840 ioctl c018620b 0 returned -14 [ 1362.288861] binder: 25846:25850 ioctl c0306201 20000440 returned -14 [ 1362.307365] binder: 25833:25840 ioctl c0306201 20000540 returned -11 13:57:45 executing program 1: syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x408880) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x400000, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x190, 0x40000) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x801, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00634040000000000000002000000000000000000000000000000000000000000000000018000000000000000800000000000000273e6694f0652b89b21a2202349ccd90a31ef180e9165fa55320465cb9a698e460e857d1821e6e817d63b9357c7a0268603ec602c037531f6351d7f92a72ae24d149c42c80030ef8212070cb39f6831e22bbb13ebc2327e9393e6c1fe56671e9d92dcbcac57ddb9f7c1df9e9732620e8c6c3f5daca53", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:45 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0585611, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:45 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5601000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:45 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x6000, 0x0, 0x0}) 13:57:45 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x2000000}], 0x3}}}) 13:57:45 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:45 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5700000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:45 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xd9, 0xc5, 0x6, 0x0, 0xa6140ba}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000380)={r1}, &(0x7f00000003c0)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05974d7a4cbb66ef28e35c5d27c5cebf6d223d49"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) r2 = socket$inet(0x2, 0xa, 0x5) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x1ff, 0x30, 0x40, 0x1ff}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000200)={r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x6, 0x10000, 0x9, 0x7fffffff, 0x7}, &(0x7f0000000100)=0x98) [ 1362.533348] binder: 25869:25873 ioctl c0306201 20000440 returned -14 [ 1362.564012] Unknown ioctl -1072143861 13:57:45 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x4000000}], 0x3}}}) 13:57:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x1000000, 0x0, 0x0}) [ 1362.624078] Unknown ioctl -1072143861 13:57:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x7, 0x4a0c01) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000140)=0x3e, 0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) r2 = dup3(r0, r0, 0x80000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000000)="a46a2bde283f97217df7a58c060a4fa6c39368be7a0824831856c53155c28a69c7c26d11f78d2758cad0e2a1e2644c235928c388981ea68dcb6b778cf0a484abf50c9bac1c06cb86df", &(0x7f0000000080)="4d6a355b1cfb12f567973df23b3f2f4a6ebe17526cd9ae8243f96dd26b9d9de8", 0x4}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1362.727261] binder: 25882:25889 unknown command 2051905285 13:57:45 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc1005667, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:45 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5701000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1362.767554] binder: 25882:25889 ioctl c0306201 20000140 returned -22 [ 1362.799605] binder: 25892:25896 ioctl c0306201 20000440 returned -14 13:57:45 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x100000000000000}], 0x3}}}) [ 1362.852179] binder: 25882:25895 unknown command 2051905285 [ 1362.858237] binder: 25882:25895 ioctl c0306201 20000140 returned -22 [ 1362.867534] binder: 25899:25900 ioctl c018620b 0 returned -14 13:57:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x12000000, 0x0, 0x0}) 13:57:46 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffe) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:46 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5800000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:46 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x200000000000000}], 0x3}}}) 13:57:46 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x2, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:46 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5801000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1363.108563] binder: 25915:25920 ioctl c0306201 20000440 returned -14 13:57:46 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x400000000000000}], 0x3}}}) 13:57:46 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="4ee6d480fb720f4ac79f2b7c733e1b413839970d697d0c49b0abca23b225ebdc3f37eaf5e214afa0ad26d5eaa7b4c59b331d72c7d8c61ce15ade4fc5acfa9fdf0490dbc61a7e183b7bc3e921c18881580e9651ac"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x240000, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0xf2, "928eb4eae41adf157906712b9656ad8ae5a6d8f7430f72ced530d7525fd07982472de26360f7733ce3352637b5643ebf4d5755da78db80480e87ea2b3e355aa2b83b3a1539c7447f71a8b0b4ab84bdc414a968bfe4877a6a6377b29c2be5b0cfa4f7bdd67c097d57c7cb0324b85b3e65d37a101eedc02e630ce69a808e27e69ae8463093886ee49846392390b3eb361577abc49428f20d585a7bbe25998a653ca739c9805e971ab4bc1b2c9ca98bf04e8257206fee94c447d6b0559183440af82f7a54f46bb511248ffb40bc1ebc34f2ce963a895f3199adafd74f38d346fb841079e2d7a8fec53afa45697b67ce865617e4"}, &(0x7f0000000300)=0xfa) r3 = semget(0x3, 0x3, 0x40) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x9]) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f00000003c0)={0x69}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000340)={r2}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0x8) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000400)=0x709, 0x4) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r4, 0xfff}, 0x8) [ 1363.317701] binder: 25934:25938 unknown command -2133531058 [ 1363.330311] binder: 25934:25938 ioctl c0306201 20000140 returned -22 [ 1363.341899] binder: 25934:25940 unknown command -2133531058 [ 1363.347772] binder: 25934:25940 ioctl c0306201 20000140 returned -22 13:57:46 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x4, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:46 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5900000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x3f000000, 0x0, 0x0}) 13:57:46 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x2}], 0x3}}}) 13:57:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000040000000000000000000000018000000000000001a00000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:46 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1363.663413] binder: 25899:25900 ioctl c018620b 0 returned -14 [ 1363.663740] binder_alloc_new_buf_locked: 27 callbacks suppressed [ 1363.663750] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1363.683786] binder_alloc_new_buf_locked: 27 callbacks suppressed [ 1363.683794] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1363.756280] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1363.786317] binder: 25945:25955 unknown command 2134168325 [ 1363.788233] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:46 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x4}], 0x3}}}) 13:57:46 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5901000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:46 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x1000000, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1363.825768] binder: 25945:25955 ioctl c0306201 20000140 returned -22 [ 1363.828315] binder: 25947:25951 ioctl c0306201 20000440 returned -14 [ 1363.847215] binder: 25952:25956 ioctl c018620b 0 returned -14 [ 1363.876898] binder: 25945:25960 unknown command 2134168325 [ 1363.910933] binder: 25945:25960 ioctl c0306201 20000140 returned -22 13:57:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x60000000, 0x0, 0x0}) 13:57:47 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x1000000}], 0x3}}}) 13:57:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x40010, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1363.953889] binder_alloc: 13562: binder_alloc_buf size 35184407347200 failed, no address space [ 1363.975839] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1364.040474] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1364.049120] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1364.112949] binder: 25971:25972 ioctl c0306201 20000440 returned -14 [ 1364.152269] binder_alloc: 13562: binder_alloc_buf size 8 failed, no address space [ 1364.160506] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000040000000000000852a62730000000000000000000000000000bc6000000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) 13:57:47 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5a00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:47 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x2000000, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0xfdfdffff, 0x0, 0x0}) 13:57:47 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xffffff05, 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:47 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x2000000}], 0x3}}}) [ 1364.588492] binder: 25952:25966 ioctl c018620b 0 returned -14 [ 1364.595342] binder_alloc: 13562: binder_alloc_buf size 35184407347200 failed, no address space [ 1364.604737] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1364.663689] binder: 25987:25992 unknown command 0 [ 1364.667482] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1364.676178] binder: 25987:25992 ioctl c0306201 20000140 returned -22 [ 1364.679089] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:47 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x4000000}], 0x3}}}) [ 1364.709857] binder: 25986:25991 ioctl c0306201 20000440 returned -14 [ 1364.748755] binder: 25987:25999 unknown command 0 13:57:47 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5a01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:47 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x4000000, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x6) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1364.770175] binder: 25987:25999 ioctl c0306201 20000140 returned -22 [ 1364.788651] binder: 25998:26001 ioctl c018620b 0 returned -14 13:57:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0xfffffdfd, 0x0, 0x0}) 13:57:47 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x100000000000000}], 0x3}}}) [ 1364.895151] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1364.982366] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1365.021240] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1365.040946] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1365.055771] binder: 25998:26001 ioctl c018620b 0 returned -14 13:57:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1000, 0x400000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000040)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:48 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x100000000000000, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:48 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5b00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:48 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x200000000000000}], 0x3}}}) 13:57:48 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x40280, 0x0) connect$ax25(r0, &(0x7f0000000300)={{0x3, @bcast, 0x8}, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000000)='net/udp\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xffffffffffffff3b, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x100000000000000, 0x0, 0x0}) [ 1365.118803] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1365.127884] binder: 26014:26018 ioctl c0306201 20000440 returned -14 [ 1365.141171] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:48 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5b01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:48 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x200000000000000, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:48 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x400000000000000}], 0x3}}}) [ 1365.292671] binder: 26037:26042 ioctl c018620b 0 returned -14 [ 1365.301833] binder: 26040:26043 ioctl c0306201 20000440 returned -14 13:57:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x1200000000000000, 0x0, 0x0}) 13:57:48 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:48 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x400000000000000, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1365.443840] binder: 26052:26054 ioctl c0306201 20000440 returned -14 [ 1365.543847] binder: 26059:26062 unknown command 875837489 [ 1365.584952] binder: 26059:26062 ioctl c0306201 20000140 returned -22 [ 1365.626412] binder: 26059:26067 unknown command 875837489 [ 1365.646271] binder: 26059:26067 ioctl c0306201 20000140 returned -22 13:57:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x100) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xffffffff, @remote, 0x3}, {0xa, 0x4e20, 0x100, @dev={0xfe, 0x80, [], 0x1f}}, r2, 0x1e58}}, 0x48) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="9d5fcc153f93ad23c260006340400000000000000000000000000000000000001800"/52, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000500000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000140)) 13:57:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x3f00000000000000, 0x0, 0x0}) 13:57:49 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5c00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:49 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x2]}], 0x3}}}) 13:57:49 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x2, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:49 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffd3f, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="f806"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1366.076281] binder: 26037:26042 ioctl c018620b 0 returned -14 13:57:49 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x4]}], 0x3}}}) 13:57:49 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x4, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:49 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5c01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1366.159602] binder: 26070:26081 ioctl c0306201 20000440 returned -14 [ 1366.198396] binder: 26080:26084 ioctl c018620b 0 returned -14 13:57:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x6000000000000000, 0x0, 0x0}) 13:57:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000200)={0x1}) [ 1366.266247] binder: 26080:26089 unknown command 365715357 [ 1366.279683] binder: 26080:26089 ioctl c0306201 20000440 returned -22 13:57:49 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x1000000]}], 0x3}}}) [ 1366.370457] binder: 26093:26097 ioctl c0306201 20000440 returned -14 [ 1366.417093] binder: 26099:26101 ioctl 660c 0 returned -22 [ 1366.471905] binder: 26099:26101 ioctl 660c 0 returned -22 [ 1367.073504] binder: 26080:26084 ioctl c018620b 0 returned -14 [ 1367.075107] binder: 26080:26089 unknown command 365715357 [ 1367.086554] binder: 26080:26089 ioctl c0306201 20000440 returned -22 13:57:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0x1f}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={r2, 0x8}, 0x8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)}) ioctl$void(r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000214c3ef5fc4f686154be16a6521c8abfc9d120ecbb02aeeed58b28816564b1c92a3f39da7635d1ff9492c2be6c1656d0239eec6e1edd0f59251c9701fb7efa4bc2c1a14e0519de414e74bc7dd52fab3ad210b96e59afb8dacadd5b45541e295d9b3e2ba428af53656b261306f059dcb11827224a9fd40ce7cf1312866326fb6ac91ed14407165d3c07c066a6551c7d5e7cda1bbc3350e8ed2caa96b2", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:50 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5d00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:50 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x1000000, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0xfdfdffff00000000, 0x0, 0x0}) 13:57:50 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0xf7fffffffffffffb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:50 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x2000000]}], 0x3}}}) 13:57:50 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5d01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:50 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x4000000]}], 0x3}}}) [ 1367.259170] binder: 26113:26125 ioctl c0306201 20000440 returned -14 13:57:50 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x2000000, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:50 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000040)=0x1d98, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\nP@@'], 0x100, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1367.311969] binder: 26124:26126 ioctl c018620b 0 returned -14 [ 1367.321546] binder: 26124:26126 ioctl 0 0 returned -22 [ 1367.342926] binder: 26124:26129 ioctl c018620b 0 returned -14 13:57:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x12, 0x0}) [ 1367.361376] binder: 26124:26129 ioctl 0 0 returned -22 13:57:50 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x100000000000000]}], 0x3}}}) 13:57:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) getgroups(0x9, &(0x7f00000003c0)=[0x0, 0xee00, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0]) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x8, &(0x7f0000000640)=[{&(0x7f0000000080)="0b043a8efd2780a7703770705e0ce9bdf64fe2617c8963bb67bbce2d6c99ea4b8a5c2a676f08cbaba0e0991e0772883abda5f0672fd571c2b289a5d4fa3219512afc75538ab20635c687e87a21e0237b60e0f5c758c513497c1c6ede6732b474b221a11834d7bc5f2d73802dd43e79ba8f3419fbb23815ea7ee367f24e0af970a480731496da88ae35fcffce01985f8e78f1d220a0ccff8eb3933c626e6886", 0x9f, 0x1}, {&(0x7f0000000140)="7c24a79f278938f1e6fa76636f88d7242a9863e9261a8dd03791ffea49edca7dc48087256b1e6eb5eb686c1999e395a90998754e588ca8a90591fe193bfc11d91ad42ab36d689c3237821ae0c0a215efd5ab0c75fd6ff7330995397e3d5697b746df8151d41a817a90952713db3363ed5741ea2d96929f62d9a1077f477fc0489fa24e14de918da9de3bd89417a4564198b9e27388e7287794c2179cb5fd9b70614e9b139706c0927297acec", 0xac, 0x1c65}, {&(0x7f0000000280), 0x0, 0x6}, {&(0x7f00000002c0)="bc55157cabd0da8584b94f3f337cf3c204f0d96b4d02ffa8ae39a22b84b97452d628aee7ea137629b0ba205040c81f6082b5b798", 0x34, 0x5080686e}, {&(0x7f0000000480)="736ea5e6ddd00108f8df449732fffc22f6ba0f5b35fe727c82ce8c0f105812a19b2d00d47dfdcf0f3a217d29134217116b386a51d16857397da5d1dbe6d235386b279dc066d57d0ebf32fdc683ef7af356b8452a02c1565e031b15d8b091f321243978ec0b2bfc48e300f3cb874af7ba659723cb7ce5c2fd4c43be8bab432d1257b83fe8d7a8f17e5d73496eccdb6a5f054e74d73f4baa846e64e5734ae5306fb5c0287875cb726ff2beca055c8ac0e83d96bf", 0xb3, 0x80}, {&(0x7f0000000380)="7d9ce77b20a3056e5e1af9ab310be70591cf04e3a9be1f107c3779fe471e6f04d99c5ee462cad09c794be721071a37745fd0", 0x32, 0x100000001}, {&(0x7f0000000580)="e7705bca0c4a4cb61ba91388ea7d1ff0d53a77f378783ace010b3982ef62f93fdf702b94b84a53a01557cd776e88a87ea051c048479e45710d53d443ea526065c15e441bedce94b62ba845c11986ce67253a16055f53d8a456d837272b73fa12e07c27b8c2f0942cc6aa033569d2a2e9e097f502104f13017cf949641150f45117d5b43885ca7293e585e25ba453a2", 0x8f, 0x9}, {&(0x7f0000000880)="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", 0x1000}], 0x20000, &(0x7f0000000700)={[{@gid={'gid', 0x3d, r1}}, {@umask={'umask', 0x3d, 0x7}}], [{@smackfsfloor={'smackfsfloor'}}, {@appraise_type='appraise_type=imasig'}, {@dont_hash='dont_hash'}]}) r2 = dup(r0) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000280)={0x0, 0x0, {0xfffffffffffffff7, 0x8000, 0xfffffffffffffff8, 0x312c3473}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000004000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:50 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x4000000, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:50 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5e00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1367.543352] binder: 26138:26145 unknown command 1077956618 [ 1367.549063] binder: 26138:26145 ioctl c0306201 20000140 returned -22 13:57:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x60, 0x0}) 13:57:50 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x200000000000000]}], 0x3}}}) [ 1367.626868] binder: 26148:26152 ioctl c018620b 0 returned -14 [ 1367.644662] binder: 26138:26155 unknown command 1077956618 [ 1367.672305] binder: 26138:26155 ioctl c0306201 20000140 returned -22 13:57:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) fcntl$setown(r0, 0x8, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:50 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5e01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1367.725777] binder: 26148:26164 ioctl c038563c 20000280 returned -22 13:57:50 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x100000000000000, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x1200, 0x0}) 13:57:50 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x400000000000000]}], 0x3}}}) 13:57:51 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_dccp_int(r0, 0x21, 0x1, &(0x7f0000000040)=0x2b6, 0x4) syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:51 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5f00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1368.417440] binder: 26148:26152 ioctl c018620b 0 returned -14 [ 1368.425906] binder: 26148:26164 ioctl c038563c 20000280 returned -22 13:57:51 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200000, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000040)=0x8) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) fcntl$notify(r1, 0x402, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) 13:57:51 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x200000000000000, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:51 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x2]}], 0x3}}}) 13:57:51 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="d0f8cd1040ce410800c000006729fa3df9d0dd2286598debf4668e663187b8b2d240553c70f197344196fcd46f3805a732d861324127cb433fba5e193628d52be0d7c07c18f8f3716b4c4399e7639f3c96ba8c39c95af7"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x3f00, 0x0}) 13:57:51 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x5f01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1368.526411] binder: 26202:26207 unknown command 281934032 [ 1368.552483] binder: 26202:26207 ioctl c0306201 20000140 returned -22 13:57:51 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x4]}], 0x3}}}) 13:57:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x6000, 0x0}) [ 1368.572177] binder: 26202:26214 unknown command 281934032 [ 1368.587592] binder: 26202:26214 ioctl c0306201 20000140 returned -22 13:57:51 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6000000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:51 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x400000000000000, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1368.642162] binder: 26216:26217 ioctl c018620b 0 returned -14 13:57:51 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1368.737541] binder_alloc_new_buf_locked: 18 callbacks suppressed [ 1368.737552] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space 13:57:51 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x1000000]}], 0x3}}}) [ 1368.797987] binder_alloc_new_buf_locked: 18 callbacks suppressed [ 1368.798003] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) 13:57:52 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x1000000, 0x0}) 13:57:52 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="d5624b59"], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:52 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x2000000]}], 0x3}}}) 13:57:52 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6001000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1369.430462] binder: 26216:26217 ioctl c018620b 0 returned -14 [ 1369.497333] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1369.516501] binder: 26243:26252 unknown command 1498112725 [ 1369.537411] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:52 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x4000000]}], 0x3}}}) 13:57:52 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:52 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6100000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1369.549569] binder: 26243:26252 ioctl c0306201 20000140 returned -22 [ 1369.559837] binder: 26250:26256 ioctl c018620b 0 returned -14 13:57:52 executing program 5: syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x800) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4a0202, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) write$P9_RWSTAT(r0, &(0x7f0000000100)={0x7, 0x7f, 0x1}, 0x7) 13:57:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x12000000, 0x0}) [ 1369.626232] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1369.691093] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:52 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1369.758562] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1369.795460] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x600000, 0x0) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000100)) 13:57:53 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x100000000000000]}], 0x3}}}) 13:57:53 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6101000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:53 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f0000000000)="c9"}) 13:57:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x3f000000, 0x0}) 13:57:53 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1370.337380] binder: 26250:26256 ioctl c018620b 0 returned -14 [ 1370.337567] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1370.351585] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:53 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x200000000000000]}], 0x3}}}) [ 1370.442073] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1370.474239] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:53 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x180c0, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) 13:57:53 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:53 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6200000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1370.506896] binder: 26297:26299 ioctl c018620b 0 returned -14 [ 1370.600473] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1370.635248] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x60000000, 0x0}) 13:57:53 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x400000000000000]}], 0x3}}}) [ 1370.659495] binder_alloc: 13562: binder_alloc_buf size 8 failed, no address space [ 1370.691510] binder: 26297:26299 ioctl c018620b 0 returned -14 [ 1370.717396] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1370.767092] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1370.791017] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x38f, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:53 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:53 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6201000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:53 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x2]}], 0x3}}}) 13:57:53 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x1) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000100)=0x4) syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1370.840512] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1370.861467] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0xfdfdffff, 0x0}) 13:57:54 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:54 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x4]}], 0x3}}}) [ 1371.009927] binder: 26332:26337 ioctl c018620b 0 returned -14 [ 1371.029632] binder: 26332:26337 ioctl c0306201 20000040 returned -14 13:57:54 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6300000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:54 executing program 5: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x5, &(0x7f0000000100)=[{0x7, 0x1, 0x6, 0xfffffffffffffff9}, {0x1, 0xfffffffffffffba2, 0x8, 0x80}, {0x9, 0x7, 0xffffffffffff8b27, 0xfffffffffffffff7}, {0x2, 0x39, 0x3ff, 0x8}, {0x5, 0xfffffffffffffffe, 0xff, 0xffff}]}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) r2 = dup(r0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0xcb) [ 1371.101541] binder: 26332:26337 ioctl c018620b 0 returned -14 [ 1371.136691] binder: 26332:26345 ioctl c0306201 20000040 returned -14 13:57:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000003b515ff0830243320000000000"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:54 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0xfffffdfd, 0x0}) 13:57:54 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x1000000]}], 0x3}}}) 13:57:54 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6301000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1371.365172] binder: 26355:26364 ioctl 2283 20000000 returned -22 13:57:54 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1371.407577] binder: 26361:26367 ioctl c018620b 0 returned -14 13:57:54 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}], 0x3}}}) 13:57:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x100000000000000, 0x0}) 13:57:54 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x2000000]}], 0x3}}}) 13:57:54 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6400000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:54 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x1200000000000000, 0x0}) 13:57:55 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x4000000]}], 0x3}}}) 13:57:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x9) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x1}, 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:55 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6401000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:55 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0x4, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x3f00000000000000, 0x0}) 13:57:55 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000140)=0x101) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144c4a4ab01646d07c3f2c876d699218871b36ebd560000080000ab31c357e3972f415ff5cb88b9ce837cd3bb"], 0x58) [ 1372.199546] binder: 26361:26367 ioctl c018620b 0 returned -14 [ 1372.321783] sd 0:0:1:0: [sg0] tag#6305 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1372.330573] sd 0:0:1:0: [sg0] tag#6305 CDB: Test Unit Ready [ 1372.336518] sd 0:0:1:0: [sg0] tag#6305 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1372.345445] sd 0:0:1:0: [sg0] tag#6305 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1372.354387] sd 0:0:1:0: [sg0] tag#6305 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1372.363392] sd 0:0:1:0: [sg0] tag#6305 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1372.372324] sd 0:0:1:0: [sg0] tag#6305 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1372.381241] sd 0:0:1:0: [sg0] tag#6305 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1372.381266] sd 0:0:1:0: [sg0] tag#6305 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1372.381290] sd 0:0:1:0: [sg0] tag#6305 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1372.399049] sd 0:0:1:0: [sg0] tag#6305 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1372.412767] binder: 26412:26416 ioctl c018620b 0 returned -14 13:57:55 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6501000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:55 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x100000000000000]}], 0x3}}}) 13:57:55 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0x5, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1372.416821] sd 0:0:1:0: [sg0] tag#6305 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1372.431657] sd 0:0:1:0: [sg0] tag#6305 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1372.440598] sd 0:0:1:0: [sg0] tag#6305 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1372.449498] sd 0:0:1:0: [sg0] tag#6305 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1372.458405] sd 0:0:1:0: [sg0] tag#6305 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13:57:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x6000000000000000, 0x0}) [ 1372.458427] sd 0:0:1:0: [sg0] tag#6305 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 13:57:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") r1 = socket(0x10, 0x8000000000000003, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000302f7cfbe00cef656eb65b375376c3e"], 0x14}, 0x1, 0x0, 0x0, 0x3}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x40000000000024a, 0x0) 13:57:55 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0x6, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:55 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x200000000000000]}], 0x3}}}) 13:57:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x250, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0xfdfdffff00000000, 0x0}) 13:57:56 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6600000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:56 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0x7, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:56 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x400000000000000]}], 0x3}}}) 13:57:56 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu\x00\x97\x04\x00\x88N\x81CxA\xdb\xa6\xfd*\xb6mY\xb8\xac\xc3\x94TD\xb3\xca\x135\xcf7\xab\xb9\xee\x8e\x89\x94#\x83\xb3\xfcC\x80\xc38\'\x12\')\xb3\x19\x18\x11\xceD\a\xf2\xe1\x86\x84F\x88O\xf5V\x90_\x10$o;\xa9[\x185\x92{/\x99\x8d*<\x98 \xb2G\xf4?g3.\xb9\v\x96\x9f~\x90B*\x0f\x93y\n\xd8-\xc11\xa2\t\x00\x00\x00\x00\x00\x00\x00\xa8\xef\x17\x83vY\x82\xa62V\x87(\x8c\x8c4[\x1c\x99\x98\x96\x89\xf4\x861\xb9\x8e\xf2(\x8dC\xb3pd\xda\xcbK\xcaz\xcd\xa3\x88dH\x8a\xf3m\xad\x9e\xd9\x1d@r\xc2\x95w\x80\x83:\x8e \x10\x15\xc4\xcf\xefPT.[\xb5\xf9\x86/pD\b\xcf;n+\rxi\x91\xc1\fw\x95\xc7>\x8d\xb7\xafY\x9a\x06\x87;G\xbc\xd2\x01\x00\x00\x00C\xb9\xcc\"\xe5\x91E\xe9\xfd\x86`\xf8\xd3\xbd\xe4\xa2>=Z\xa5\x9fU6c\x00\x00\xb1\xbd\x8a\xcf\x13\x03\x87[(\x95\xf7\xcf\xf0\xabJ\x85a:\'ah\x7f\xf0\x8b\xf5\x01\xd0`g\xa7>\xb2\xf8ND;e\x06y@\xc3\xb5\xb3\xef\xa8=f\xf11\xddGL\x18s\xb3$\xa9\xc8s\b0\xc6{\x8b\x18o/\x7f\xa2\x87', 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x8}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000040)={0x10000003}) r2 = openat$cgroup_int(r0, &(0x7f0000000100)='spuse\x00\x00\xd22\x00\xea\xff\xff\xff\x00\x00\x00\x00\x00\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x2000000000007) [ 1373.168095] binder: 26412:26420 ioctl c018620b 0 returned -14 13:57:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) dup(r0) 13:57:56 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x2]}], 0x3}}}) 13:57:56 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6601000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1373.286177] binder: 26454:26459 ioctl c018620b 0 returned -14 [ 1373.296102] binder: 26454:26459 ioctl c0306201 20000540 returned -14 [ 1373.309154] binder: 26454:26459 ioctl c018620b 0 returned -14 [ 1373.320541] binder: 26454:26462 ioctl c0306201 20000540 returned -14 13:57:56 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0x8, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:56 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x202000, 0x0) r2 = semget(0x2, 0x3, 0x0) semctl$GETVAL(r2, 0x3, 0xc, &(0x7f0000000100)=""/33) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x6, 0x4000) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x620e, 0x0, 0x1}, 0xc) listen(r0, 0x0) 13:57:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x200000, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 13:57:56 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}], 0x3}}}) 13:57:56 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:56 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000003000"/24]], 0x0, 0x0, 0x0}) [ 1373.601933] binder: 26477:26585 ioctl c018620b 0 returned -14 13:57:56 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6700000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xfffffffd, @tick, {}, {}, @connect}], 0xffffff76) r3 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x8, 0x406500) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) 13:57:56 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xb, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:56 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000]}], 0x3}}}) [ 1373.784752] binder_alloc_new_buf_locked: 17 callbacks suppressed [ 1373.784763] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1373.804439] binder_alloc_new_buf_locked: 17 callbacks suppressed [ 1373.804454] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:56 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6701000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x2aa) sendmmsg(r0, &(0x7f000000df00)=[{{&(0x7f00000002c0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}], 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) 13:57:57 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xc, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:57 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x2000000]}], 0x3}}}) [ 1374.180944] protocol 88fb is buggy, dev hsr_slave_0 [ 1374.186147] protocol 88fb is buggy, dev hsr_slave_1 13:57:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', r2}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000080)) 13:57:57 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xd, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:57 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6800000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:57 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x4000000]}], 0x3}}}) 13:57:57 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x3f, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1c66884b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e1810000000e8bd6efb120009000e000100400000ff050005001204", 0x2e}], 0x1}, 0x0) [ 1374.390169] binder: 26477:26585 ioctl c018620b 0 returned -14 [ 1374.390365] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1374.404300] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:57 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1374.513689] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1374.533801] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:57 executing program 5: syz_init_net_socket$ax25(0x3, 0x3, 0x0) 13:57:57 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x100000000000000]}], 0x3}}}) 13:57:57 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6801000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1374.575292] binder: 26737:26743 ioctl c018620b 0 returned -14 [ 1374.591874] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space 13:57:57 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1374.681060] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1374.715359] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space 13:57:57 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x100001000000000, 0x0) mq_unlink(&(0x7f00000000c0)='cgroup.controllers\x00') openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000000)={{0x7fffffff, 0xa}, {0x0, 0xfff}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) socket$inet_udplite(0x2, 0x2, 0x88) [ 1374.770942] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:58 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6900000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:58 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x200000000000000]}], 0x3}}}) 13:57:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:58 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:58 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x4000, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0xc00}}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@subj_type={'subj_type', 0x3d, '/dev/binder#\x00'}}, {@dont_appraise='dont_appraise'}]}}) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='fuse\x00', 0x10018, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x3}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0xd93a}}, {@max_read={'max_read', 0x3d, 0xffffffff}}, {@default_permissions='default_permissions'}], [{@obj_role={'obj_role', 0x3d, ')'}}, {@measure='measure'}, {@fsmagic={'fsmagic', 0x3d, 0x1}}]}}) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$inet6_opts(r5, 0x29, 0x3f, &(0x7f0000000000)=@fragment={0xbf, 0x0, 0xfffffffffffffffb, 0x2, 0x0, 0xc4, 0x64}, 0x8) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000080003000000000000000"]], 0x0, 0x0, 0x0}) 13:57:58 executing program 5: mkdir(&(0x7f0000000440)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='.//ile0\x00', &(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x33) r1 = creat(&(0x7f0000000380)='./file1\x00', 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x80000, r1}) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x3) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) syz_mount_image$msdos(&(0x7f00000005c0)='msdos\x00', &(0x7f0000000600)='.//ile0\x00', 0x7f, 0xa, &(0x7f0000001b40)=[{&(0x7f0000000640)="1489e8ed5c05655d6658afc48a99f1fe28", 0x11, 0x10001}, {&(0x7f0000000680)="8b5f77751a87902eb0988ee1a8773469f84d5de6e73d48f09e86c4a7886867cb31c8c77d8023976f5a96e20d0a65bbe5e6f93a16a61a5c23a57e7ef00183b55c3322ebbd16dbb87a12710c312d6a290984b4328dba5c115919c66d10b71112559623449e74e75a68b5c9e8969710c103c734a10cdb9c8c671792d3785c08", 0x7e, 0x2}, {&(0x7f0000000700)="38b18e5095a458056c9b9df89d03c5b5629d99915cc5eab100f8c410f4d8c4c657bacaf0ff8fb0eea9bb4b8d7436f1b56412ba0a34d19c4809c1310a7ef7465469948c406558b0a3b447587c04cb1d388656b610c11514b7224f0be58c26b375b7778f5ac8120cc4e2470243ed1719e5d4f2f7a195874e8a9d2f19b237197cf47ffc0c458b50ec73f1a3ecb3c53f59808142288c24eae0a53fc57646321f3dad66328d232aaa51e69d5b5f6cddd1b7386bdb919382e4e374", 0xb8, 0x1}, {&(0x7f00000007c0)="e019e714b15af015abe60653419e8aa10c7a856ba8d1411890d19ce6c35f3381890625cdd7475962357da93a9fb6e71cfccb18af743bfc5e31e0f01a1d0e0c", 0x3f, 0x81}, {&(0x7f0000000800)="a9e1f408852a23db681cbd544e173e39371f2e636b3d4a3f7dcfeb9a68389598e3aee22421bf4df97166311fb0d43cbaad8395", 0x33}, {&(0x7f0000000840)="0c8844a787b76e0852ab7abcb804df368e99005df298f7056627", 0x1a, 0x9}, {&(0x7f0000000880)="1e688de494de06c146efeb7c7cf8cdd61811b6818ff012a6ece2d8c8298e1171c6cdb8aa2c34298161488976d16ce56394e5be15c6409e3b2e93611cf63fbaa54fbc320b123dc362f179ee7211c84fb5dbde9b47078010eb69c94df5c37fef874a41daf3c66d16cc815357b8c65e6f8c9a4d6e9437467dc85c261ad0bc12144d50487581881ef9ccab9c7b72288dea7560b0c02e674671b81fd97f8b5662fabd7ea1b84418da2b31c42868844feb9e35e5218b8fdd04dfc69b05db567a8dc9867b8268", 0xc3, 0x8}, {&(0x7f0000000980)="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", 0x1000, 0xfffffffffffff512}, {&(0x7f0000001980)="f163dbd4f7d2020eb581d4d41945b919a4f45eeca8c1cc3cda52e20030e9d7768903ee69afae15591fe1484f206b7e522bdea4494e99b382340d941f3570aba680f667b7a6628740ca956bd28c2a3dd71b96b7d217c066de25cf660fba26eea50bdba168bae521b55a9cfef5f3c6fe2cca37bf311fa167b83e8329c99b089af1b3824485ea15a6818fb2c05d592ebbc343953bce8258c1a2e2ccfb1408764f7f087f4755a6e1fc948b18aed1d5", 0xad, 0x2}, {&(0x7f0000001a40)="3e94d441c786b1a06e7eaa810fa6d0bb015ad4d6db97d67ab5babcaef83d9be3a30e451c193c0c280894ffc3608ffbbc429bdc44b1501cd3b6a2569086028cb95d8d17d3fdc76b4ec0bb68446ab6239c325df0933ebf1d2e0727af9bb2dd5863ed984c1171e5584272c03f4058966d8b1c02eb2379b8f3eb20f65a2c92c76ebdac6d97427046d2e1db98d37fa2ec13ec5b3496daec2666ad742995a1d0c26a7002dbe81af4ce4747f61a390d56d17c872c5b6c117906366fb2750141183df3d5d8f4f815af548f8cc987060ce85f72c94b533a68909112e66e6d0a710b31ab7fb216c6a054efb270e7423c6019d8", 0xee, 0x1f}], 0x2010010, &(0x7f0000001c40)=ANY=[@ANYBLOB="646f74732c647e176f74732c646f6e745f6d6561737572652c6673636f6e746578743d73746166665f752c646566636f6e746578743d73797361646d5f75"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) mount$9p_unix(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.//ile0\x00', &(0x7f0000000340)='9p\x00', 0x212000, &(0x7f0000000500)={'trans=unix,', {[{@access_client='access=client'}, {@cache_none='cache=none'}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@version_9p2000='version=9p2000'}, {@mmap='mmap'}, {@posixacl='posixacl'}, {@posixacl='posixacl'}, {@version_u='version=9p2000.u'}], [{@subj_type={'subj_type', 0x3d, 'overlay\x00'}}, {@permit_directio='permit_directio'}, {@uid_lt={'uid<', r4}}]}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r2, 0x80000, r1}) symlink(&(0x7f0000000200)='.//ile0\x00', &(0x7f0000000080)='./file0/f.le.\x00') truncate(&(0x7f0000000180)='./file0/f.le.\x00', 0x6000000) [ 1375.357858] binder: 26737:26743 ioctl c018620b 0 returned -14 [ 1375.358065] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1375.371709] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:58 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6901000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:58 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x400000000000000]}], 0x3}}}) 13:57:58 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1375.503949] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1375.526347] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1375.541738] FAT-fs (loop5): Unrecognized mount option "d~ots" or missing value [ 1375.574242] binder: 26879:26887 ioctl c018620b 0 returned -14 [ 1375.606504] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1375.665323] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1375.703601] FAT-fs (loop5): Unrecognized mount option "d~ots" or missing value 13:57:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x101000) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:58 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6a00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:58 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1375.742624] binder: 26879:26887 ioctl c018620b 0 returned -14 13:57:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2000, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x5496, {{0xa, 0x4e20, 0x2, @local, 0x8}}, {{0xa, 0x4e24, 0x6, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xff}}}, 0x108) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:57:58 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}], 0x3}}}) [ 1375.837012] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1375.851545] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:58 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0xf}], 0x894d5da, 0xfffffffffffffffe) r1 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/unix\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) 13:57:59 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1375.985336] binder: 27046:27075 ioctl c018620b 0 returned -14 13:57:59 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}], 0x3}}}) 13:57:59 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6a01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:59 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x7fff, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1376.068244] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1376.114118] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:57:59 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:59 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}], 0x3}}}) 13:57:59 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6b00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:59 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}], 0x3}}}) 13:57:59 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1376.771484] binder: 27046:27075 ioctl c018620b 0 returned -14 13:57:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x600000, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) 13:57:59 executing program 5: clock_gettime(0xffffffdffffffff2, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000140)={0x80000001, 0xfffffffffffffffc, 0x100000000}, 0xc) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='yam0\x00') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000300)={{0x3, 0x0, 0x0, 0x800, 'syz1\x00', 0x15a4}, 0x0, [0x10001, 0x603b, 0xa00, 0xffffffff, 0xffffffff, 0xfffffffffffffffc, 0x80, 0x3, 0x401, 0x6, 0x8, 0x1, 0x4, 0x3, 0x2, 0x7fff, 0x8, 0x7, 0x3ff, 0x1ff, 0xa997, 0x4, 0x6635, 0x4, 0x7, 0x41, 0xff, 0x6, 0x6, 0x5, 0xaf, 0x8, 0x5d, 0x80000000, 0x46e54a4c, 0xffffffffffff1f6e, 0x101, 0x6, 0x4, 0xfe00000000000000, 0xa17, 0x9, 0x3, 0x9, 0x8, 0x9, 0x4, 0xff, 0x3, 0x200, 0x8000, 0x8001, 0x90f6, 0x5fca4723, 0x0, 0x9, 0x100000001, 0x4, 0x1, 0x101, 0x3, 0x6, 0x3, 0x7fff, 0x200, 0x800, 0xb76f, 0x1, 0x100000000, 0x4, 0x800, 0x3, 0x8e, 0x2, 0x4, 0x418e, 0x401, 0x3, 0xb07, 0x800, 0x5, 0x400, 0x1f, 0x7, 0x9, 0xff, 0x9, 0x2, 0x897a, 0x3, 0x4, 0x77a, 0x6, 0x4, 0x7ff, 0x6, 0xfffffffffffffff8, 0x6, 0x6, 0x1f, 0x9, 0xffff, 0x10001, 0x1, 0x9000, 0x1000, 0x7, 0x4, 0x3a8473f4, 0x5, 0x401, 0x3, 0xbce8, 0x3, 0x9, 0xffffffff00000001, 0x9, 0xfffffffffffffeff, 0xfffffffffffffffd, 0x401, 0x3f, 0x80000001, 0x1, 0x1, 0x6, 0x6, 0x2, 0x5], {r2, r3+10000000}}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') pipe(&(0x7f0000000240)) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x420, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 13:57:59 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6b01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:57:59 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000]}], 0x3}}}) 13:57:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:57:59 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x2, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:57:59 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x4, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:58:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100, 0x40) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000000c0)={'netdevsim0\x00', {0x2, 0x4e23, @empty}}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000080)={0x7, 0x7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:58:00 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}], 0x3}}}) 13:58:00 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6c00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1376.930836] binder: 27272:27274 ioctl c018620b 0 returned -14 13:58:00 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000400)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000480)=0x80, 0x80800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x1d, r1}, 0x10, &(0x7f0000000580)={&(0x7f0000000540)=@can={{0x2, 0x2, 0x7, 0x5}, 0x0, 0x2, 0x0, 0x0, "b8a66867a5a67b92"}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0xf0, "c8f538edd542e200cb7fb27ee3f1db0c0150dd1ee83f1051dd36898ccbdaec60b8909b5e54e4b1d449c65b421fe25f7c09ebdc5524496c964c8575456ac31b8e4eb3552f3821e26a6c20f6363145818b806668f843003a33abd975541cdb77ff19657150612533224c0531dd92b9a7a072f20ad11dcc8e219435adefe87bc31444a5e9b7eb93d8e4500b466c92f172f1cb90850f08d62dfdbbb6d6d1f7b9e09f000fc9ff548d2782953ede5c5868647bfc95c4e11684256823983cee73bb0e80150bb8d0cc9f9913a78e987adaec130c34e3f307c1702e9d08dd09b6270ee8cf026e04252ae2f175ef40decd1984aca6"}, &(0x7f00000002c0)=0xf8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000300)={r4, 0x10000}, 0x8) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, r5, 0x304, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x100000001, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x11) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000140)={0x1d, r6}, 0x10) setsockopt(r2, 0x65, 0x1, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.SMACK64EXEC\x00', &(0x7f00000003c0)='keyring\x00', 0x8, 0x2) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@v2={0x5, 0x3, 0x4, 0x1fffc00000, 0x9e, "e51ed1cb44f9c19f52abb7f2f34e7d8bfce5e541f2fc243b91d31654616f97b1dad3516c6e934a1a13934c4058b88b7bd4a94be57913d197d3d81e9f692fb80572ece31f17ff62581b28a566c1bed4ed60e2373e96a0cb8775eaf33b44e2d5598d76c5e6379eaf2c58806b32f82d490ac312a7bebf842bd882c258718bc38324f832045e9f33bcf977214569e5d82a08d9932bec533248b1feff6e24a349"}, 0xa8, 0xf554ec5713f95289) 13:58:00 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x1000000, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:58:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x100000000, 0x8080) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@increfs={0x40046304, 0x1}], 0xfc, 0x0, &(0x7f0000000040)="bdf8d2ab32ff3c6d908e20c914f7b3f4c0e0428a7701e6c4f558d316bba979789103b39cfab91ea150ff813b9626819bc6fea4c8536772e79450253ba8459e132ea2b3201ed2583bbf417d523bc782cee529f9bb3a41083974182387ed2d10ae01750eb076ed4b12080a72fda8170d3d7e68d3c5e98cf933a8634ef1d9cfd9989a19af44771f5b1375e15ec4d909e2602f278e16f6af4113877e9533491d0d78eee29a90916b45a7531977e775ae8307d4169d3b5427eb5f7334eaa2e649ec63bb0d62844728f26dc2600b4f1a67fe5280e3715fe9125078eb701446a056477ec2990542aba62ab7026fbae5e59f9bc88160a7ce463d437fbf686b56"}) 13:58:00 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}], 0x3}}}) 13:58:00 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6c01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) close(r0) 13:58:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x500) r1 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='net/netlink\x00', 0xfffffffffffffffc) keyctl$read(0xb, r1, &(0x7f0000000100)=""/80, 0x50) lseek(r0, 0x0, 0x0) 13:58:00 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x2000000, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1377.729771] binder: 27272:27274 ioctl c018620b 0 returned -14 13:58:00 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x400000000000000]}], 0x3}}}) 13:58:00 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6d00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:00 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x4000000, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1377.814275] binder: 27417:27419 ioctl c018620b 0 returned -14 13:58:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x6, 0xc2) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000002840)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x100000000, 0x6, &(0x7f0000002780)=[{&(0x7f0000000580)="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", 0x1000, 0x4}, {&(0x7f0000000380)="5222880a4822a669baa6f6efbd16f10e179e4bb871a92a2c33c7f4ccfec69b38e26a164f44ee4fc2e02a6f781fbaa064445282006b7b96b14e69b7f6b527a63dff627e49f79a9a229423cbebbe6d49038e702523a5a5d98f72709b644297b80533a32e0f8ea23498beea37b85e1e1fe8dd1469677b172b846987bf888279f6199d38d3a50120d24bb78cba97756daba205123bac26571877d99a3297f6", 0x9d}, {&(0x7f0000001580)="d94791f1016bd471199a82007b830fd1cca4a16074555a81248932958a7b93b33070e7f32656c08aff22967ef0d100a557b0deba0342c452682aaae2602450ca0f751b9ea9b20571e09b3bd73d47c5b13f372fda7d6e1813eae665e7b415a8793bb0a1e293423c7696adc95a10fc248db9090724c10781f3d998f303ac2526d498657c67bcd36c432560a5de8336da7f7ffd6d1d48d318ff2cb5faad50cf66d39627a4d2b9f4fcaa129ad07c983342b9a2cba08c281e037425f097c3aef72da38dfed35b0959d1d5bf25bacde43bb92937e6acefab668d2722bf1c91b7ab5a82535bfe158081", 0xe6}, {&(0x7f0000001680)="6d121d69eeb74be0695857d4e50344089a82849e6db882d235a43d621e35d3998b71a7c40df648b815fa7c18824e692e04d391683c8ff77cb92df41042d3273d91f05091f3338c949ce7b311c3b6d3813e21aef60dcee4da64bb17529c34190dca15b0db78ce0005fc3bed9a81360057c427e08952766aa9385b0dcc25822a330d629ac52d4f706b7ad5a4c7e2000658ab2612bf6cbea4bd9e5a94fe6ad7b8de60a5532a8f5ac971e1de8c79841130ed84bac4f90b59852f6a6ba3f2365f4e004f3f7b970d7b4b26", 0xc8, 0xcd}, {&(0x7f0000001780)="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", 0x1000, 0x8566}, {&(0x7f0000000280)="489884db9756f56765e22e44e3b826915b0e99f879c81ac4b82159f5de5d6dce020c36d7751ca5b5c3662ddcba867526a510bfe85fda90993c17933b1eb6e380d3956b96fa09b6a6db6e864b601be61b40776dd9091b7cadb7c8f76c42423fa8738c259da118", 0x66, 0x400}], 0x80002, &(0x7f0000002940)={[{@disable_sparse_yes='disable_sparse=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_remount='errors=remount-ro'}, {@uid={'uid', 0x3d, r3}}, {@umask={'umask', 0x3d, 0x100}}], [{@appraise='appraise'}, {@seclabel='seclabel'}, {@smackfshat={'smackfshat', 0x3d, 'wlan0bdevIvboxnet0]('}}]}) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000480)=""/253, 0xfd) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:58:01 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}], 0x3}}}) 13:58:01 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6d01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:01 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], 0x3}}}) 13:58:01 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x100000000000000, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:58:01 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6e00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="106308400000000000640600"], 0x0, 0x0, &(0x7f00000003c0)}) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000140)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x100000, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read'}}, {@blksize={'blksize', 0x3d, 0x1200}}, {@max_read={'max_read', 0x3d, 0x80000000}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@uid_eq={'uid', 0x3d, r4}}, {@dont_appraise='dont_appraise'}, {@subj_role={'subj_role', 0x3d, '/dev/binder#\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}}) [ 1378.598645] binder: 27417:27419 ioctl c018620b 0 returned -14 [ 1378.745472] binder: 27661:27663 ioctl c018620b 0 returned -14 [ 1378.794106] binder: 27661:27663 ioctl c018620b 0 returned -14 13:58:01 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x200000000000000, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:58:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32f, 0x0, &(0x7f0000000300), 0x208, 0x0, 0x0}) 13:58:01 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}], 0x3}}}) 13:58:02 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6e01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:02 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100002b5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x11, 0x80002, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, r1, 0x0, 0x6, &(0x7f0000000000)=')proc\x00', 0xffffffffffffffff}, 0x30) ptrace$setopts(0x4200, r2, 0x4, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff19, 0x0, 0x0, 0x101aa) 13:58:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000040)=0x1, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1378.990999] binder: 27671:27675 unknown command 0 [ 1378.996037] binder: 27674:27678 ioctl c018620b 0 returned -14 [ 1378.998852] binder: 27671:27675 ioctl c0306201 20000440 returned -22 13:58:02 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x400000000000000, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:58:02 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}], 0x3}}}) 13:58:02 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6f00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1379.075812] binder_alloc_new_buf_locked: 10 callbacks suppressed [ 1379.075825] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space 13:58:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair(0x10, 0x80807, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="e8890000000000000a004e2200000acafe8000000000000000000000000000bb010000000000000000000000000000000000000000000000000000004700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000001000000010000000a004e22000003f9ff0200000000000000000000000000010000b400"/272], 0x110) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x7f}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000540)={r2, @in6={{0xa, 0x4e20, 0x89, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffffffffff7f}}, [0x6b6, 0x2, 0xcd, 0x7, 0xa18, 0x0, 0x1, 0x6, 0x800, 0x3, 0x8000, 0xd66, 0x9183, 0x5, 0x7]}, &(0x7f0000000080)=0x100) r3 = dup(r0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e000000681ff885780f289c155fa749dce6158a71aacd50571ba7aca0b04bfcbae15a65da35ba70c7e3017c25326046c3e47673c09782753a93618f7796fbe6601fd75b780d534affeaceff00b9c43d926769b6f186e1bf999392538cd3abaf7ca024cac39426ae80a8149a8b568a8d58e60c2b1e9a25e21b87ebce8c155d1e1b4a771f3a249811942a2b03a2647a863aab267db5d41fd759fe162bd5d2ed34b600"], &(0x7f00000000c0)=0x96) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000640)={r2, @in6={{0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x1c}, 0x8}}, 0x9, 0x3, 0x9, 0x7, 0x9}, &(0x7f00000003c0)=0x98) msync(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x5) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r4, 0x6, 0xffff}, 0xc) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000140)={0x5, {{0x2, 0x4e22, @empty}}}, 0x88) lsetxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x1) getpeername$llc(r3, &(0x7f0000000700)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000740)=0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000000000e8000000000000000000000000852a62730000000000000000000000030000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000100000400000018000080000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 1379.121050] binder_alloc_new_buf_locked: 10 callbacks suppressed [ 1379.121066] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:02 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}], 0x3}}}) 13:58:02 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x2, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:58:02 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x6f01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1379.286174] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1379.307997] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:02 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x4, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:58:02 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}], 0x3}}}) 13:58:02 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7000000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7ff, 0x800) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a625e00"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 1379.736260] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1379.764783] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3e6, 0x0, 0x0, 0xfffffedf, 0x0, &(0x7f0000000080)="e36c38e66f5da292a236a5b9885f64004c20c5b1c6ab3b000e00608cd77006e83b53ad08889c3afaa1ee39683b5418a0108a2b29a064c95272c9b5ed22a56024d7d52403a5f8856624bad8718901b8bec23233ca5ac9dc7b2ae4c17172a158ca2e22a1957dacacec1d015f91d443b0b37370b2271ca2edd5b515df698f03209e3201dfa1a4af8f702e9763c82923698e29aa712957f7aa05abfb164689b7314138be09a028555a9b7dc0a8ab1703bafd0b9b9bf3312b5b8c1a1f0b412ac0f6773ab923b6b63bb10d658b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:58:02 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}], 0x3}}}) 13:58:02 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100002b5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x11, 0x80002, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, r1, 0x0, 0x6, &(0x7f0000000000)=')proc\x00', 0xffffffffffffffff}, 0x30) ptrace$setopts(0x4200, r2, 0x4, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff19, 0x0, 0x0, 0x101aa) 13:58:02 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x1000000, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:58:02 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7001000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1379.795054] binder: 27674:27683 ioctl c018620b 0 returned -14 [ 1379.803732] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1379.816517] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:02 executing program 3: prctl$PR_SET_PDEATHSIG(0x1, 0x31) r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x8, 0xffffffffffffffff, 0xfffffffeffffffff, 'queue0\x00', 0x3ff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x12) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000100)=0x100000000) socket$netlink(0x10, 0x3, 0x1f) 13:58:03 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x2000000, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:58:03 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}], 0x3}}}) [ 1379.948532] binder: 27935:27937 ioctl c018620b 0 returned -14 [ 1379.975758] binder: 27935:27937 ioctl c0306201 20000040 returned -14 [ 1379.987009] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space 13:58:03 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7100000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1380.058555] audit: type=1400 audit(1560693483.091:109): avc: denied { create } for pid=27940 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_scsitransport_socket permissive=1 [ 1380.094197] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1380.175038] binder: 27935:27937 ioctl c018620b 0 returned -14 13:58:03 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x2}], 0x3}}}) 13:58:03 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x4000000, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1380.218890] binder: 27935:28004 ioctl c0306201 20000040 returned -14 13:58:03 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip_mr_cache\x00') ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000001c0)) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) accept4$packet(r1, 0x0, &(0x7f0000000040), 0x800) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r0, &(0x7f0000000480)="de7a8a4ec31a6d6c51eda96215c932167c3bca61a15036c7e0de5350a038582575b2ad36e8711d2c7beb07076dc38466b795f5a787f7e1b9a76686619542c5668a3eed59eb2d0b0e2557301720a78542723e7ec210bbd1661cf9409d4e7dcc19bb67e38abdf62baf700e9db382a32a1f6de63efcb5f7c746789f6ef23cb0cd468426f04c020a5c7dd95447e59900077affc88c3bc5270bffa041855ebd74451ca17f6a26a80fa5ce52130f700151fc60861b9075a37f7823ec6a8a01ca7fe305ff57db2a676ca783c4ea46e08552bf83aef8", &(0x7f0000000580)=""/133}, 0x18) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000020479d4e45f9ede500000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x9, r2, &(0x7f00000000c0)="3d1649987a08461e26a4efaa9c95", 0xe, 0x1, 0x0, 0x1, 0xffffffffffffff9c}]) 13:58:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000018000000000000000800"/52, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:58:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000200)=""/213, &(0x7f0000000100)=0xd5) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r2, 0x3, 0x8}, 0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x7a, 0x0, 0x0, 0x0, 0x0, 0x57290300, 0x0, 0x0, 0x1c, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc80006000025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd0160ec941a3de45387daf7b1ac786d0e8a75e8904655faf6f2bc6cc487d93a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffffffffffff4116892516105829576914e70bfeb59800f97c97644ab8a7"}) 13:58:03 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x4}], 0x3}}}) 13:58:03 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7101000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:03 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x100000000000000, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) [ 1380.471506] binder_alloc: 13562: binder_alloc_buf size 5664762112924055952 failed, no address space [ 1380.501412] binder: 28064:28067 ioctl c018620b 0 returned -14 13:58:03 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0xa9, 0x410000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x800, 0x0) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffff9c, 0x54e3, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f00000001c0)={r3, r4, 0x8}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@access_uid={'access'}}]}}) [ 1380.550485] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:03 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x200000000000000, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:58:03 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x1000000}], 0x3}}}) [ 1380.607806] binder_alloc: 13562: binder_alloc_buf size 8796093022208 failed, no address space [ 1380.632596] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:03 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7200000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000300)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 13:58:03 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x400000000000000, 0x0, 0x0, 0x0, [{0x2}], 0x3}}}) 13:58:03 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x2000000}], 0x3}}}) 13:58:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xb9, 0x0, 0x0, 0xba, 0x0, &(0x7f0000000140)="6bb721daf2db57567f2325dcb3b18e660baf7743811f993cb6bac8e2225edd530aea92ba8c869b3023503d56864c0ed5da0d38ef8681e21683264a14ceeb4ef5186aabeadd712023ef1afb477e64c24c8ab347e9b0bd62e717feeec5ae11a2adcbf2e11f9a9ce8aa39f0921542f21763c8833f670a4e2a5fd21938cadbdbbdd3a1cabf167cac7f16b12fe301a1cd15217bfa343b469fb2da91147c6892b4adfb3e5ecc494be9e8e810bd009e8fe4f4c98120ebc202d21a86a2e4"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:58:04 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x10000, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x7, 0x4) timer_create(0x2, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0xea, "2c8ddb538ad99b93978426f02fd898635cd42262238f907c1c8c22f7075127af5d9d07e5f1b68f98c3fac204e6868a84cfb8118c46aa91f262b85532a9837f97092607f93866abec473066a5d9fa9084b338208c2d03280790914e7577b15cd45e079618e05de09c530dd0f48d0914b480d502cdd3ffe291ff5b95fe5c985d2f8d13a8e6e08eec082c7119ede07fda332b648a9b26e8c1b6fb1a7b9180534876502589c7d858214bb991fd9bf347e281e57f6fc6f19a32a6ace01c4d0f4491f9d9ce514ab6c897e98ec9336bf750cc845eecfa9047dece4e26d358060f6a66e80f04e85e19447e33bcbe"}, &(0x7f0000000080)=0xf2) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r1}, &(0x7f00000002c0)=0x8) 13:58:04 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7201000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:04 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x4000000}], 0x3}}}) 13:58:04 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x2, 0x0, 0x0, [{0x2}], 0x3}}}) 13:58:04 executing program 3: r0 = accept$ax25(0xffffffffffffff9c, &(0x7f0000000000)={{0x3, @bcast}, [@default, @remote, @rose, @netrom, @rose, @bcast, @rose, @rose]}, &(0x7f0000000080)=0x48) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0x44) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000280)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r1}) r2 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000000040000000) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x100, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000680)="162c2c8a4da3bfd247772df97e7fb917a410b148ed9cd2577e396a6d90a067ab3e3181b8fb5aa69d75a6a453354779014e89b3f06994c2e0e21ce9d415f775bfd17fd09558078d02d273d37786bc7afe00f9aa22f2d03634f0c7da086900818cfa9dccb0b4bace852b1010129a8fd24754e59eb8b93411bccb14fb84ef7b2ab6ba618f0848b68285d6a349d81933efabf390e006a0438fc2a95e39083db5b652c53f90237e352297583da60e0df96520aa630917a29085f7a53613a4f56eae594c41552085a914b4511003f54c1c8256dbd5b41481faadc01cd3a759eba740102ee6a920da8e1f2ce51e86b8aa90d404fb", 0xf1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1004000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0d0c2cc73c00804ed03a"], 0x14}, 0x1, 0x0, 0x0, 0x4000881}, 0x4000000) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x2, 0x0) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f0000000380)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000079bdf576b98184f1b0467006dcb3dbe38e4e34dbc59aef52b55717b0bcb8fbf2cb897102443b72baaac3bdd3195b80f65130b8e471c94960ef0d840eb49e60bc83c038daf3d010ae4f1c461354f9a974d128365ffb4eabbe71adb2685b23e2713ef926191", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 1381.290472] binder: 28064:28067 ioctl c018620b 0 returned -14 [ 1381.290675] binder_alloc: 13562: binder_alloc_buf size 8796093022208 failed, no address space [ 1381.305652] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:04 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x4, 0x0, 0x0, [{0x2}], 0x3}}}) 13:58:04 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x100000000000000}], 0x3}}}) [ 1381.397682] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1381.415236] binder: 28312:28320 ioctl c018620b 0 returned -14 [ 1381.417690] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:04 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7300000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1381.465184] binder: 28312:28320 ioctl c0306201 20000040 returned -14 13:58:04 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, r2+30000000}}, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) readv(r0, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x10000000000001f4) tkill(r1, 0x0) [ 1381.540660] binder: 28312:28320 ioctl c018620b 0 returned -14 [ 1381.547269] binder: 28312:28411 ioctl c0306201 20000040 returned -14 13:58:04 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x200000000000000}], 0x3}}}) 13:58:04 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000480)={0x8001, 0x80000001, 0x6, 'queue1\x00'}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x13, 0x10001}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={r1, 0x0, 0xc, "6b8a0c873a74691b2652cc61"}, 0x14) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/22) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000000000000000dffffffffffffbff0000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 13:58:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x11a, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:58:04 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x1000000, 0x0, 0x0, [{0x2}], 0x3}}}) 13:58:04 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7301000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1381.716479] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1381.753249] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:04 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x2000000, 0x0, 0x0, [{0x2}], 0x3}}}) 13:58:04 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x400000000000000}], 0x3}}}) 13:58:04 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7400000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1381.881543] binder: 28468:28493 ioctl c018620b 0 returned -14 13:58:05 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x4000000, 0x0, 0x0, [{0x2}], 0x3}}}) 13:58:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = getpid() r2 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x10001, 0x400100) perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x10000, 0xee7, 0x100000000, 0x40, 0x0, 0x7, 0x8, 0x5, 0x6, 0x4, 0x2, 0x3, 0x6, 0x800, 0x8, 0x5, 0x7, 0x0, 0x7ff, 0x1f, 0x8, 0x3, 0x4014, 0x4, 0x5, 0x0, 0x637, 0x3ff, 0x7, 0x7, 0x401, 0x7fff, 0x3, 0x7, 0x4, 0x2, 0x0, 0x3, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x8, 0xdd71, 0x7, 0x7, 0x800, 0x1ff, 0xa}, r1, 0xf, r2, 0xa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a6273000000000000000000000000000000136f5b0000000000852a62730000000000000000000000000000000000181000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000188a98c509e4cc45dd496e0000000000"]], 0x0, 0x0, 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 13:58:05 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x2}], 0x3}}}) 13:58:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/302]}, 0x1a6) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000040)) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 13:58:05 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7401000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:05 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x100000000000000, 0x0, 0x0, [{0x2}], 0x3}}}) 13:58:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101000, 0x0) accept4$ax25(r1, &(0x7f0000000040)={{}, [@netrom, @null, @bcast, @null, @netrom, @null, @default]}, &(0x7f00000000c0)=0x48, 0x800) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x3, 0x0, 0x2, 0xfffffffffffffffe}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000140)={0x8, r2}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xfffffffffffffcd4, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="6e28fcbc463c9a6fa56ac1d7a42bbdc3ec5a208b0df422e4393df3a24c64be8c5f8df12e460648f22d59c7c3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000004000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:58:05 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4}], 0x3}}}) 13:58:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10400, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x3b, 0x25, 0xe, 0x4, 0x9, 0x7fffffff, 0x4, 0x7a, 0xffffffffffffffff}) [ 1382.662151] binder: 28468:28561 ioctl c018620b 0 returned -14 13:58:05 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7500000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:05 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x200000000000000, 0x0, 0x0, [{0x2}], 0x3}}}) 13:58:05 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x1000000}], 0x3}}}) [ 1382.832013] binder: 28706:28740 ioctl c0306201 20000540 returned -14 [ 1382.875951] binder: 28706:28789 ioctl c0306201 20000540 returned -14 13:58:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x10005, 0x7a) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000000c0)={0x1, 0x4, 0x1, 0x0, 0x7fffffff, 0x4, 0x8, 0x8222, 0x8, 0x4, 0x7, 0x0, 0x0, 0x100000000, 0x6, 0x94f9, 0x6, 0x2}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000040)={0x1, [0x6]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:58:05 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7501000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x50000) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000040)={0x3, "cc9dfc987356f7c7d0de5a89350a1fe995786bb390d8ac572185efc732f0118a", 0x3, 0x36b079e42123afc1}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x80, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="40924202c618987cc93faf6c0545fd27b8a4d0c8b908c24242f0a4d6a33eb4", 0x1f, 0x80}], 0x20, &(0x7f0000000180)={[{@errors_continue='errors=continue'}, {@nointegrity='nointegrity'}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@obj_type={'obj_type'}}, {@fsname={'fsname', 0x3d, '[eth0'}}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:58:06 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f00000000c0)={0x5, "f2244870c59c04fb123f3ab0817e8bd9de75a1fa0bc3d4454f74374f753ee8ca", 0x1, 0x1}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) 13:58:06 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x400000000000000, 0x0, 0x0, [{0x2}], 0x3}}}) 13:58:06 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x2000000}], 0x3}}}) 13:58:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x3}, 0x4) syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffd9e, 0x0, 0x0, 0x6e, 0x0, &(0x7f00000000c0)="2a13765200bdd9143ec23543e08f6ad154e38d01e63fe70b01410a2a1f81e8f48b18ad98baab1af908fce98f29d355ad7b81797bd337542e053473418336dbe587a0117a4af8197df0fca6be77653d07e6f9dc5c5c81f162f577e389d3b1740fd7ee8859c5e0f8163c0000"}) connect$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000faffffff17000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:58:06 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7600000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:06 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x2, 0x0, [{0x2}], 0x3}}}) 13:58:06 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4000000}], 0x3}}}) 13:58:06 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) [ 1383.305104] binder: 28934:28939 ioctl c018620b 0 returned -14 13:58:06 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7601000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1383.382715] binder: 28934:28939 ioctl c0306201 20000080 returned -14 13:58:06 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x4, 0x0, [{0x2}], 0x3}}}) [ 1383.433312] binder: 28934:28939 ioctl c018620b 0 returned -14 [ 1383.433623] binder: 28934:28943 ioctl c0306201 20000080 returned -14 13:58:06 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x100000000000000}], 0x3}}}) 13:58:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0063404000001c6dd500000000000000000000000000000000000000000000000000000000000000000000b5c100"/57, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200280, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000040)=""/199) 13:58:07 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7700000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:07 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x1000000, 0x0, [{0x2}], 0x3}}}) 13:58:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000040)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x7, 0x686, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 13:58:07 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x200000000000000}], 0x3}}}) 13:58:07 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f00000000c0)={0x5, "f2244870c59c04fb123f3ab0817e8bd9de75a1fa0bc3d4454f74374f753ee8ca", 0x1, 0x1}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) 13:58:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1383.992726] binder: 29073:29078 ioctl c018620b 0 returned -14 13:58:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x401, 0x20000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000380)='./file0\x00', 0x2, 0x8, &(0x7f00000009c0)=[{&(0x7f00000003c0)="17e9de6e2170e0e725bee83ab55a7f739976cf8e954f292d93d4ee173e4e8f93e1ec0d8d64", 0x25, 0x200}, {&(0x7f0000000480)="f8e6812e7f1b58d66e894a65698837fd86d16785b214aaf0a98ee2f1a7666197fc65cdd905df5e0bd37314c3a824f9af299c20c30f624a5d5cb58022445d6c7f6fbc3b05868b1b686e6de2593581fc7afc8f7d47d2dd2fdfb7960cbe24bb95673ea36f6d252ec3c16f2b7badc31799d984fa2c9adef148568123f51caee54e929d5bfff92e7337ecb3628259c6440aa46ba0f5724b6db3d2351b6186a07bd0225df19f85cccab66cc6ae9adaf8ee89d84055669b8a084a3e05e669", 0xbb, 0x5}, {&(0x7f0000000540)="258a655f793cdd6b3ae7a9f038fde9de7276cb7324ba36556f874ce90754b5e170c50ee5a84ed3119a0691e443aead38a52acb722e0d36758b6587c11ed5871a82ca7c4008602df0e7de2b137568c0168789890f0f938aa1b0c103420b03c4c07d3bdd51a95da085eaba65e28039879b91e7cfc7d75d9188eb3fe36c018022e0b88e99b60c713523d032fb482a6025427cb174ffd786ecaa44df56e073eaa772e74ed5bddc3a93a89b93d164dfd9ffed2c341519b37b6121dfa816733a1b2fd6850b03ccf868321793dbe61705f1ca2f1a6f37f7c8c01cbb7dfcee14d35ddf8b3cb8da141268", 0xe6, 0x18f400000000}, {&(0x7f0000000640)="5783812015cbefd531ed893aa45c591854614c1be78c2d3fa1e47ebda395814821485b535d514105ad0987a479671f71a0994519c774efccbfd220f862523d73136ac20f49e1c7abfbed6607d798a3e9181748e729cc82918fd0210158536925dc74b048836bcd05139b8490e89e5a7b5f6e52153e05d2bb4c987728dca95ca9fec28945c644d2f41a3c00ad201260756517008a245cda5721bb901403cdc61bfe34983e0765baa7a2032247a771fbcccdd6450f370fad678dddf9bb0ff79a627fad86c9769a42fa32fcdb3fccc73213742486ee76e587cd0f2264b84f9a946d4e2a541eb339d73953", 0xe9, 0x6}, {&(0x7f0000000740)="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", 0xfb, 0x6}, {&(0x7f0000000840)="6078efe5352063b3bcb72ab6a9a0d2d94ce072dd6b92f1d53642d4aba8cc724587729aa29d46132c64502992f55acd287b158b45d902418b3a480971420743caddfa03ece951187ffeb1f42dd5babc3f2ab83bd2a62c586d31006452c6c79f8d76db1ff40a128ff6cfa22d85d1768baaa1463c98fa0ca3be0ed218c78b770e807103ba7ff5b3c2797c019da82bda11fa6caf6dc46fc2c7c4b5feca23d00a67e4326b1b7592118ee29aafabd615cbac145bdf7da778d2a59ed1c1d0f734f5eaeb", 0xc0, 0x8}, {&(0x7f0000000900)="97f89bfefff3267ad4a7e5f4f3eba469a19cadd828ac5a782e769fec92b46089ebb87e6396f4d2ae9423155186251a627b1aa3893129fc10eb5bdb6bb40deaaf5fa4481136f9327f13fe67ddaa8dd72486fa64282583767618e983f02045f870eb9046396e0d287af90efe0c", 0x6c, 0x5}, {&(0x7f0000000980)="185ba66a7f5416f1fb1312e925a5438ae29edf903198e89134db263de88d2d03e69528281af36d28cdee5191ba28598fd3", 0x31, 0xb3}], 0x1000004, &(0x7f0000000a80)={[{@nodots='nodots'}, {@fat=@debug='debug'}, {@dots='dots'}, {@nodots='nodots'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@permit_directio='permit_directio'}]}) r3 = getegid() write$FUSE_ATTR(r1, &(0x7f0000000180)={0x78, 0xfffffffffffffffe, 0x4, {0x100, 0x1, 0x0, {0x5, 0x0, 0x9, 0x800, 0xffff, 0x8, 0x7, 0x1, 0x6, 0x7fffffff, 0xffff, r2, r3, 0x100000000, 0x100000001}}}, 0x78) lchown(&(0x7f0000000280)='./file0\x00', r2, r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYBLOB="00b2f42e30005d0018000700000000003000000000000000f67d3645adb92f3298c9de3f4bdd850503575dada6d35a3f35f4a4684c071aab2c55751632c9a0207eb6c89240ccef731cd5fb653e4f2b500ab10000000000"]], 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000ac0)={'ip6erspan0\x00', 0x1000}) 13:58:07 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x2000000, 0x0, [{0x2}], 0x3}}}) 13:58:07 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x400000000000000}], 0x3}}}) 13:58:07 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7701000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:07 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x2]}], 0x3}}}) [ 1384.182086] FAT-fs (loop3): Unrecognized mount option "mask=^MAY_APPEND" or missing value 13:58:07 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x4000000, 0x0, [{0x2}], 0x3}}}) 13:58:07 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7800000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:07 executing program 3: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = semget(0x2, 0x10000000000004, 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x5c5c, 0x10000, 0x5, 0x800]) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x4400, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = semget(0x0, 0x0, 0x10) semctl$GETZCNT(r2, 0x2, 0xf, &(0x7f0000000000)=""/80) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0x400, 0x4, 0x569f, 0x6, 0x4]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x1}], 0x0, 0x0, 0x0}) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x3, @dev={[], 0x10}, 'ifb0\x00'}}) [ 1384.784771] binder: 29073:29078 ioctl c018620b 0 returned -14 13:58:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) 13:58:07 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x4]}], 0x3}}}) 13:58:07 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x100000000000000, 0x0, [{0x2}], 0x3}}}) 13:58:07 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7801000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:58:07 executing program 5: r0 = socket$inet6(0xa, 0x2100000000000001, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x2b}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x9}}, 0xe8) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0xf1, 0x0, 0x1, "fd2225753232569a7d6e04daa5c7349f", "0f583a5121dec751aff614f4a65f639703a20e7162c6c00e28c6f5d0f90db2ea02682ba557e327fe7b2732cfcc0bd29ad8ab4c0290adb0c1d2f700e6c9f9638229b07ddeb30f426e411ceec90f858c306db5c5fe6040863d290fc764d6f3b556f985c0a2220cdb3ac07ca0296ffdf9752fb1c9cd7b033d853d3dfc1cd514cbe2e121bedd3ef2d4dc313206b15ccb79ed775925a7da41516b55012d1235538309ebfba1773cad2421b807cc7ac0253cd25376d90e2d33a91133be19543d057ede3832d976056c50f585e55e67dcd49a287e4dd64c271146e2406151cc"}, 0xf1, 0x1) [ 1384.841498] binder_alloc_new_buf_locked: 11 callbacks suppressed [ 1384.841510] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1384.856748] binder_alloc_new_buf_locked: 11 callbacks suppressed [ 1384.856762] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1384.929917] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space 13:58:08 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x200000000000000, 0x0, [{0x2}], 0x3}}}) 13:58:08 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x1000000]}], 0x3}}}) 13:58:08 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7900000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1384.975837] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1384.995010] binder: 29336:29338 ioctl c018620b 0 returned -14 [ 1385.074071] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1385.117471] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:58:08 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x400000000000000, 0x0, [{0x2}], 0x3}}}) 13:58:08 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x4f, 0x10000) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/216}) r1 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x8100) 13:58:08 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x2000000]}], 0x3}}}) 13:58:08 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7901000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:08 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2}], 0x3}}}) 13:58:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xc0000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000020000000000000000048000000000000001800000000000000639aa34290096085e008ae29df564753266593576aef6f0faa657b9711cea5b4aeb63f1fb2fcea6248696d4ff9ee8204412010eb096d7c3d06ab12ebe9c3004c31f12ef637a39d48a3b9542440e803c4138a2bf50e5b7766e247c2befb8ff794cdf28737dc40ebc7e38cee", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000380)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdbf1, 0x0, 0x0, 0x0, 0x100000001}, [@map={0x18, 0x7, 0x1, 0x0, r1}, @generic={0x0, 0x100000000, 0x8, 0x2, 0x10001}, @ldst={0x0, 0x2, 0x7, 0xa, 0x9, 0xfffffffffffffff4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0xc6, &(0x7f0000000280)=""/198, 0x0, 0x2, [], r2, 0x6, r1, 0x8, &(0x7f00000003c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x5}, 0x10}, 0x70) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000100)={0x1, 0x1, 0x3, 0xc}) poll(&(0x7f0000000140)=[{r0}, {r0, 0x8000}, {r1, 0x408}, {r1, 0x118}, {r1, 0x2000}, {r1, 0x81}, {r0, 0x1000}], 0x7, 0x4) [ 1385.786302] binder: 29336:29338 ioctl c018620b 0 returned -14 [ 1385.786533] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1385.800200] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:08 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x3) r1 = creat(&(0x7f0000001780)='./file0\x00', 0x80) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x1) syz_read_part_table(0x3f, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="38c908ecc4f2d5be76ddd740312fcca9f4c93b7da277a66b86920f640675b50ae8be0459", 0x24, 0x8}]) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x40001) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000001740)) sync_file_range(r2, 0x7fff00000, 0x5, 0x1) sendmsg$alg(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000001c0)="a35596a161e309133b135063a98bb00a179add942adda5c52a001eb0c0fd3b4e85ca4d158230131d68f0504a41674288a17ca12c5baf46d54f1946847342c2a64955883c06d5e5aa9e4737da32ed423c2aec65240f0054d82f2380fce1bf0eb7de2aaf84997f60cff4b5c197fe600f3d2110cda56b88724c74fa18731d4b8dfdc9e28f588a83a11d8f3b7993492ae2bc", 0x90}, {&(0x7f0000000140)="f8151256ee111fa10bb913aa95e4233f3b1266ef7c2e1fdae73b8e0499", 0x1d}, {&(0x7f0000000280)="669444407e501acad9d3342bee515c898ed9b9891d12f1b2ad5782d33edd77ad3a7ab0d50646b37bb49ed425e28576d014cf696fca113b8a931f3ed454f0ca6d91f5eb737266ef7c54bc44af928cbaf9dabdf0929fcc4ac64529a35f160d115a71472918a9e31722a89dfbac8fd2694ad3a91e840529c104c1bf3260010e94f3140b522a20d052f3b876e6bf25b0a0f7c95e2a7b51a8eaf2f2d076d26f560b287f3cec9fdf0e2171e85711a0527e992e8212d910da65609135c2e0204f3d1c54bf4bfe5653844baf4757a0831c185cd04a4595f86f46ea2ac93debc6913b4f1fcd55a659b5e9721d9a512769d59190104ffec76e2167ff96fb3061eeece750794068249c43ff370ad588b3cab2be7e3b31330e0466bb226d41b3e2625e97629048a82ef68e9bf129e586ce87408fd3fd9299e28da9a16f32c98bebfb362967b632659c3d4c9b9546b775df2546cef61d33da94133914acbea08c854d9c577e8fb7519ac8d2d0fc166f3af2dfdcb885b7c6f7da387caf58cd2d915c00068e26e8fcf2c5a3bbb301d0b9c0a102ca5ee78479ba9e7631fd77c9fe34560cec0ba57272d322f9a3f278e164fb4d0676c5edac896346ffdbf25e851b73081bb8ed5c2d5860b89e3bdb83115133fd2ea5198b32d6f05e1bbe44d495f0af9a292598ba892cf98c6a47898d6e9e0bff9110e6c38b25a33b51f7fc204c4f88946494c2f7b41f50539f9e45e8fc78ba3e18cd1796d512bfc9f490f9c0ce083698f1ecc28c23a7baa55b7961d3968b8c40df2b4027bb1acc494b86c915857210698b3c1faccc12a4efd09fc8437aecdd3580e05a68a2c89855186b6b767c81457a7982c9f85db1781a126453de8591d4b8739ef9e10d6970dab8dac383a96ef10e31bd5466bf3277cce17f302b0c6c01b63f857c5f3ab765628fb4f63e95eff794f5f395cb797a642d10dc2179cc8643e4e999a604802f6365c1c5eeb9be0a085b631487205ef4b27befe2f2150723162097ed22372fd677e4bdc7fcdf44d08393ff3d3a0c9f3e281a7feb11388d0cd76ec0d9c59083e75675de12327c803f14de6fe81b0e43c812431a5f196d09a46029e6e22df17ac7f8612d04fed61dbe58db8e56ea6b562010161d79dba80826a9bab50a4993d6693cb214a2638b9cd47653d11a7a60f510c125fe34f9e7b0d79a793f1dcc2ffccbd91310389e5f3eab4ecb216830d3a90bed349817a3754b0535102c3700042990c07c81ce87c120397337160b01892ab597676854ccec68303d794ec09151f95914047682ee63f49857fded68ec3391a054a3ae2b493cf60acf1ddac3eab2ff530e78672589df1a590b9181401736bbd1ca2b3891c20428f9fce8381c993fe655ceeaf89f3bc042997f162726130a33229c1ba070c9cd980471865d5e24be865add9e4c7c63db37c262e45acb7f3802560a5019d18b13e07c8d1b5434d6c898a60e111e0dbe9e887cac7ce2d43f5b4adb7f979c0987102850bc8681a7e11d41467f2cd5624e7199b7c1d2df4dc4d2bfcff6a7fa9e30d229a8d30864b8dd0686994b131dfb544537386bfe0d0115814e4c1e79b156209ad7f9e9679938fe05e668d4e2c591d8717e829d27fdeec324ace3361cf6e2a11e4cac7953625732bca4f6ffe3ee3269515f789ac8b56d6d5d649e48e4a33fc6684fd2cdd8de47d18ffc2af56c0e1aa1c6be3b84489fa4bc4763786e21ddbb040f71ef117f307a2225a02cac8306fb146c721a072da58c8359715d22af6a28ca482d444fbe9ba4854ec299842bd097af5fbc90996779f22a9e39ea87ed7b6ef62f617aa74b7d01d0006766bccb16078a491de8d7f030db5534bd4a22fdf41122c6c19e9d4469040b6e32c1c03c5f99e8cbe0ace3bbc3bbb4815b6960fe18e69adb7e712581aca5dd47ba1644d5ba2c1ab0123e8642f080c721ce98dc667337685de9986252e13af28f4947ad4c7db02c3d582fd477bd84a35426f77ff15ba13ae098273c523146819a8ee8964bbf5a6e3df2c3004b6dddb728cc661cfd17e71a1928f9f1d9e6829c69283eb1591d419e05139d9dee400f1a7a9be95f8d84b18fedcbf44cb17fa0a8e5d824f5f0ef647c2448e426278a31034cdb389415d7d2e87d9caf9455ee37de7cb285629932588bbfe085423c2788d717ee163c33571ad4a56a8cae742b63a52af14863ef13044d11886c0c288c95388cd23291f45cd80bb3431ad0100dca1a3b8a8c351a9c2fd2645f41b5c56a7d0e3e90cedd60ad296681d052324119e87a3adb3808ad7b7bc1d19de055804d2cdde09ec4665da6453ffa2c9f5adb77c6495fc8dca9fb7331d6f1da9614442620953d6ac9de4a5605c0548d14b5551f9fa1e59aa6235453a913d39859fa1ba0f518406a849091e9ef2d97e5c5cb64034be33dc1187939f86c2c515293f8ffdafb04ebb547b763af3ddc75fefd0437273f1501e36fcc241f5d230e70691b499f43c455c90e40ebd39182c9d1c137897fbdeda843da1b8247402448f637784ac25b94431afb6a05d8f8c1db91ad5d2084f818d341e4834b4df9e093e1efd44d18e7ab09a2606a40aa1713be0099eb3ca2afbad8b87eb598f071447ecd4a48769c90248c99ad3b9f436777ffa9afff5069f0ccd1d815faadf85c88231269b9ab334486b3256326831b72ab224c452cd3811d2c45465a8f7d65318f5de304908ab7cdfb06a9eada9d0c96f8979078da7d48318ec7fe2b053ee33ed1a10071d07911d420fc4efba53b3aed859144bddba7c07d3cd257af594abe03a03fd56c08bce4ca6cb2d69e7fed7161ca16e9b4e6d939cd8b4d3263943513dc7b35a4d375c2bbcb943bf8626027c6593ebc35acbc4d8f20de523d6059004641ce758dd10ca56637e5ba0e5fd73269615a4c42e8105ecc5fc4bd81cb54884776fdd5782f9c9e2f9f72b3bda07208fddde6ac872da054edc1cd832d97505aa4263c5ba327c1766da6fc96104d938c6bd9efe12d619f36ad7b0cd712fb466ef8ce265884ebec27d94007bbe7144851c7cc02f2afc0dde50fd86e78fc89523a886983348f586db969b9aafe77d84fec5570e4d277b3149d55d1098692df0576cddffb58d9453d45fb56701f95dc8bb36749c0a1f333b2ea618b0efb3557a921b7fbbf22729a3d28d39e5edb96bd0d0090fefeccdf304780832d29348e7f9af31e4753a4acfdf80cf9ce0af61611aeea3ad430094a5a2995615cb02fe21cb7b4d1d92cd61630c85d42a86148d7cdf143ef73d8b43b583510f04a75a7d38899d09e96b2ace03ae7eb5ad04a7a05392e04c623ebfcd37d67c3de44a0552289c5916620eb5616a3773f98b21697926e8323eb27f00d1cdbb041335b4e3f702bcfdbcd8f21e518a5ab629242be26d27d011e66baa9b805e20b701ff114499f6b60964aa85fe3e1830ef6ccbae110d866c9fc529b2784cd7a940f682491637d2d70405e9aeeb11dbf29b12d795ea233ce7f48de45dea407d996a735c72749358f898410f06cd20baddfe62ee83f345e5cdbc493621e0b689e6dbf4600e3a435263b7231205be1d16fbafe4d7f33d31e691da68917dfe31d877b403e889609211c4f91290b75317a1bd43a698259fe2b8757f1a1566a7194f1d889db7f7bb8f73118b0468fb2ae2043151ada5cfc4b4653750a3168ad9c60c61320b9e51e7dde9a6e42e0415990cf483f228e728099b783b18beaa4dd2103d3f10660760454f7ec6ec964b99c7ddf2980177818155c9e485d393c27db64cd280478c256ff40f227054895648f22e7a2813b1091a4d2ea11745d733154e71082d7fbb79a3e0fa729c06e238ef6cbab8ff101b565baa2b010badc194d7b1c13bcf6d72d3a50709e793c7717059d638ff3006fe73d830f5e7ee1515012e31c93e992eebf9c603bbdb196632e1697ad63d558d778f0fe5b7d851290e215f3d395e60d10d05605c6b224e0ea86856fb8295bcc7697afa72ce5add0b7daeaad68652d0536c5787e8f56d4a80fed6079dc0bd21aab27395a12760431a8ae445c92df68c4984704908bcbe0469451850d5a9959d30cefc4dc358e8c85a916114aa3ebf8dea17f3fa162b56e378264177bf351cc3033afc2bedc21e92f5e3c3d6ed7d615397161edc0e9e53818fcd0efd4bc9eb4145f490dd1057a212bcb6c8061629f4e665f7fb0e6c75bafa2da7d5e886b8b87c26fadcd31d07d2a4cab96139c13a75cd1245d03a42acd7fec886b3b3293c2bf1f8819ec6123ed9f97a231c0bda3469a641f60fc87227bbe142cf9b0f5c59fa1df5fa8a1ad39a187ade9ff559b6428f7e5c1fb0a547c89eec5702bd1c71092bf973b8a2ef93894316dbe2f64297791bf02023ebff8dcbc6f31e0a747bcb8164414341e04adddec31993c720b6ce17b799161ac0bde9038b27662c909262e02996712177bd7aff4e886d0ab31682be1149a119485cdfd52dd1eaeb58b43c5bebf334724d93dcdea0d60d9d8cf8910e529550bb32a7bb50d3a9975edefec8f1beb2f14cd5e39063c5a434a657d8c3582b2d5cd45688aaf9fe9630c0dc51130abdf71f5d100499e4a0c3a8d7f5b7f8c3e7c8e23e5b22128bcecf4b16533917b3d2873493d726043722bb929af479fffbcc637e1df192c544af3e72d07c1e3a445c7d674b105ce7134f01b875e4e980647779d97fae6b0546261f5d077f62146f419f99a26b5ac048d43cadfbda6eddacd8996c476db9f97b1d0a984c3cdc8b86b912fea40c1cf565a9dc082f38a6350a2a932d3d07f3f6b8e8395c75309b8cfb6d3500952ab665b154a435978bcdcbb140faa37691d4189d4d4d30d551be99286ae8b31c13cb2b3ab2295f99862f4a8f3c4f5f8c0a26994a1931c4d3a51ac95e2ffd57d440d3cf2ba3fe347ba4a81cbf7e08476185ee904e683ee95cf72d7258e56bec491219d183c24927a1d5869fd298981f1347362ff0d828e9fa5fb4ed1586eb03ee5a48f4312eb4a30efd30a67907699d537fd5c457b8b27891884033eb4d02580eeb01ea77675bf54ad682383f3ac26552597cc2920d7ca99e5e6b9248e09e64b642bb72e7faf0d8ce4140ac8a3c53d569ecadf798479cb351bf03aaf99ec11afb0d7fe8c374973db4580700e53d0b190e6c7e44b146fcaba33e94f03f18109db757db8e1f23b6c941dee6ee1c79b944c13a627ef49dbbb6e2a3fcc6f7aac4b34666255d5bb419203727e937b5288b1c9f1b9196e22dc033c40551b0aed07f814fd6d8055c63acf8f59a632280e73608188239e75a430a1ac51e17883655ef29cf2ef0edeed6d539ac6389eb93a2867534a5f1feff65ad34706611e28bc5cd1a6ca72404d0c6d5b676f2e0b33faad796369615a9c7eab61381fdc632653c08a6733710398a0bed58d06a4b986f0899e6be87860bd90da81cc19bf99ce6364a1f8556f3617365b654af46573f8a11d2cccfd8654731b736072bf758f47f0160f7ac9ff0d52a53da27b7dbaf0f676d0cef0c8dd2c48801f767a9c2825b6d629446295b438183b2ff62808ccef977a8e1803c226d21b43e80ce48a3e3563fac136bb01c0aab43313ba7914171999f91071c10f05fa06a665c556d03a37fe0d8172f18bc110740be25ff6c7a4a5bdb320dbc9943dd80ed95b0222981275e8fc5f7cb32cef7eb3c0e7891a682e9c8d9310965bb93379e2b2c07aa8b6afca2467c55a2990fc12ca118b536ba9fa0911ecb25591493406e2e028bb95b81cc3ed33d02bbe71a65414db61f21c82a1a75b06d736a2c61d75ea1b8f54a5ffddca47dcaf4d2f8c86919ce2", 0x1000}, {&(0x7f0000001280)="2483bcc258e555d56cb86e4399c5fa0a464236cb66515c12718dca665f65a45046cadc20be8aeb4778264589ddcdc6bbff81f9a4c79c51bca0e785a2be3f7324e2c0ac1862fc7f6afa62de58f006c9dc0fc2f07ea061d97d2e795552ca5074f0f89407d8283818d585e13a2e2dfe49d5694fc6b3860ac022990e92325019410bd640498bcfbe1159b96f0c24e3d59c93df16a7973fbcfc50474c1ecb4a45f0", 0x9f}, {&(0x7f0000001340)="f33d8491ac9059", 0x7}, {&(0x7f0000001380)="8f7b55b359349e1739de44fdbe0e09352345c3ec27492a1dac188f4ce2aa6a35a715c794c1c505f719e4c752ffc989cc1cafb8153bea44d2619451b4e10f1bf9447d0d44fdfb250dbaf9742892d4fb62576f291ade9e9604704403978fab7587f7b56a5a0042ab791f2a8b2048ac067ab1f42c6a3951763179e0b5c574cb294811c09dc32ca9f02fe049f11fb87bbfe548b35acc5fb807e92d66073a3501a5157c400b8de47c8f0f7d03f5d5d9307915b35550bd4282ba919ccd2dd70482ed70c62bc2336688dcf8", 0xc8}], 0x6, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000000000017f10000040000000600000000000000900000000000000017010000020000007a000000c69059463c8354fb89ffc5561251c793de34fcf61fb51321a70ef1884754dafea55fcfae222558c0be76196861b356297a5e456aeefebb4cad50040812dc4af56acb73ce9727aaa05402b915af9ae99b94275f48379e1f0a1a0df21e7617060b8f396782b917f4ae5b90d8d763281fd15028b1d34032de477ea30000f0000000000000001701000002000000db000000e0ce9775729a88b91d50542e5c0bb7ad23d118e0c9a9c2fecaca6d9394a17687224a2114550a54972c74bbd4544e8ee6a36d8ae486fd3fa901a49e276bc8df05a904dc2065d404f70717ecb83c2d66db749c595aaa2a00e4997b9593c0c78c8738d0e02f10a13ee7f4d3d9618e487412daae5f1cef589700784d20e3f8e09f64cee84cd66a7b09fd42a89a82da7f2b081a1d12ac328af5724821828ef4919c7084671551c5ec769ee014591c357e1b09ed4a784d1db70d674f4d4f83ffd5ee38cb6c33b22847210f651d93261790d18f8a32361125205fb9912654a1e8cc00180000000000000017010000040000000300000000000000180000000000000017010000040000000600000000"], 0x1c8, 0x4000}, 0x0) 13:58:08 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x4000000]}], 0x3}}}) 13:58:08 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2}], 0x3}}}) [ 1385.874101] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1385.903062] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:09 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7a00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x4800, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x1}, &(0x7f0000000100)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) fcntl$addseals(r0, 0x409, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:58:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0xa}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}, @acquire_done={0x40106309, 0x3}], 0x84, 0x0, &(0x7f0000001480)="a21f25680976545dc8fb04e4be756702a89f2402b828a350f9c3b64fde2a70003e53d767415032bd1fe07e2745c0984d54b9d27a680200f9d7bbe70cbc277b708cd51e7868abc0c0ca2d7bb36494e29a8113f8e0b2546a375195d2dbe0721213998c8170ddf9a49f69a4e30e552a2af8fdd0982aaca8fd95de214e920010d262b02ec21a"}) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000a46b118a9f9c213842cd64aa045d35000018"]], 0x0, 0x0, 0x0}) 13:58:09 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x100000000000000]}], 0x3}}}) 13:58:09 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x1000000, [{0x2}], 0x3}}}) 13:58:09 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7a01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1386.205990] binder: 29596:29601 ioctl c018620b 0 returned -14 13:58:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002640)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/250, 0xfa}, {&(0x7f00000012c0)=""/199, 0xc7}, {&(0x7f00000013c0)=""/197, 0xc5}, {&(0x7f00000014c0)=""/234, 0xea}, {&(0x7f00000015c0)=""/116, 0x74}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7}, 0x2020) getsockopt$inet6_dccp_buf(r1, 0x21, 0xc0, &(0x7f0000002800)=""/10, &(0x7f00000027c0)=0x31b) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") accept4$inet(r0, &(0x7f0000002740)={0x2, 0x0, @loopback}, &(0x7f0000002780)=0x10, 0x80800) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockname$ax25(r2, &(0x7f00000000c0)={{}, [@rose, @rose, @remote, @rose, @netrom, @remote, @bcast]}, &(0x7f0000000000)=0x48) 13:58:09 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x200000000000000]}], 0x3}}}) 13:58:09 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2000000, [{0x2}], 0x3}}}) [ 1386.277476] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1386.317499] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:09 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7b00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1386.382345] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1386.407337] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:09 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x400000000000000]}], 0x3}}}) 13:58:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x3, @mcast1, 0x100000001}}}, &(0x7f00000000c0)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0xc8b, 0xfffffffffffffff7, 0x8000, 0x9, 0x1, 0x10001, 0x3ff, 0x4, r2}, 0x20) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000340)=0x7) renameat(r1, &(0x7f00000002c0)='.\x00', r1, &(0x7f0000000300)='./file0\x00') read$eventfd(r1, &(0x7f0000000280), 0x8) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) 13:58:09 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x4000000, [{0x2}], 0x3}}}) 13:58:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x80000001, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c23302a", @ANYRES16=r2, @ANYBLOB="00015c020000ffdbdf25110000000800020004000400"], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/176) 13:58:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x80000000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x800, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc000088}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="000428bd70001c0006000400020008000100a8b8000004000200080001009f0a0000100007000c000400020000000000000020000500080001007564700008000100b273624da814725dc8f3350a8cb998696200000c00020008000300ff7f0000200005001c00020008000300040000000800030009000000080004000200"/137], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x80) 13:58:10 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7b01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:10 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x2]}], 0x3}}}) 13:58:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2, &(0x7f00000001c0)="b1dca1055e0bcffc7be070") r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x800000000005, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f0000000280)={{0x5, @name="281d4993bffee994937cb8e57aa1d02c37650da275031f61a91532340da70973"}, "9dd2b4358d62713115e4653673989fc195ddac2d35db71dd43c4e2fd503ba859", 0x1}) listen(r2, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r2], 0x18}, 0x0) close(r2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000040)={0x5, &(0x7f0000000380)=[{}, {}, {}, {}, {}]}) close(r1) 13:58:10 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x100000000000000, [{0x2}], 0x3}}}) [ 1386.988292] binder: 29596:29611 ioctl c018620b 0 returned -14 13:58:10 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x200000000000000, [{0x2}], 0x3}}}) 13:58:10 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x4]}], 0x3}}}) [ 1387.080463] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1387.100991] binder: 29753:29760 ioctl c018620b 0 returned -14 [ 1387.114241] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:10 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7c00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1387.179802] binder: 29753:29793 ioctl 6612 0 returned -22 [ 1387.194160] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space 13:58:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2, &(0x7f00000001c0)="b1dca1055e0bcffc7be070") r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x800000000005, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f0000000280)={{0x5, @name="281d4993bffee994937cb8e57aa1d02c37650da275031f61a91532340da70973"}, "9dd2b4358d62713115e4653673989fc195ddac2d35db71dd43c4e2fd503ba859", 0x1}) listen(r2, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r2], 0x18}, 0x0) close(r2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000040)={0x5, &(0x7f0000000380)=[{}, {}, {}, {}, {}]}) close(r1) 13:58:10 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x400000000000000, [{0x2}], 0x3}}}) [ 1387.245494] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:10 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x1000000]}], 0x3}}}) 13:58:10 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7c01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="00000000001a00000000000000000000000000000000000079cd6d0a35f9782461b0c4454275687a36f55d218897e147b31fad3ed5edb6d22e88a4e430d08925f60c14e2d09f7fbde2eb9566f053a92d6654474e3430499840f592c193d8aceaf7dd252620114b5b371e04adb8adb17e06dff139d7"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:58:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="0600000000000000753a00371000000000000000002b3455e43800003000000000000000"]], 0x0, 0x0, 0x0}) 13:58:10 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x3}], 0x3}}}) 13:58:10 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x2000000]}], 0x3}}}) 13:58:10 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xbf7, 0x400000) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x102000) utimes(0x0, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffed9, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x7530}, 0x10) clock_gettime(0x5, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000440)='logon\x00', &(0x7f0000000480)={'syz'}, 0x0, 0x0) [ 1387.891160] binder: 29753:29760 ioctl c018620b 0 returned -14 [ 1387.894213] binder: 29753:29793 ioctl 6612 0 returned -22 [ 1387.975063] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1388.010344] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:11 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x4000000]}], 0x3}}}) 13:58:11 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}], 0x3}}}) 13:58:11 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7d00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1388.027001] binder: 29897:29901 ioctl c018620b 0 returned -14 13:58:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:58:11 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7d01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:11 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x2}], 0x3}}}) 13:58:11 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x100000000000000]}], 0x3}}}) 13:58:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffff, 0x80080) getsockopt$inet6_buf(r1, 0x29, 0x2a, &(0x7f0000000040)=""/48, &(0x7f0000000080)=0x30) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000d8000000000000000000000000000000800000000000000000000000001800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000fb9a522c1c9c2a4329543ea3de063f35f40de9a6a8262ce06d4faea0143613bcdfbbe3c0ba81dd530481652fc41ea5e5a65349c123d1eee536f4b4591b1bd08f25f6014cbee7f4cc4623014f49de522dd3e385024f4edcc16d484e496be23a22a944f70bdcc2aba78cb25fca89df9b54eb"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="00000005000000000000000000000000000000000000000090d27a54bb8d201b59d0a25a25f3e76ac9f394bbb9f9202faa8e61b6373311476ff0534be6e743fa418f5b04265fd77b7969d551ba8a49134de1aa8ad243328d855fdc8c5c880f3eb49bdf34284b43623028dc5530ce6b6f2c7909003e19bc7f41c17460fb62a8b2e1f926fd67c87d4e35085225c472d06966eb16553827e0f8838c02003e2cad447ef4a61f0afba44641cc875949bc0f538cf9d233c7a12b705665b2140f1a00000000000000000000ac80fa95cc15f9c5e1fdb2c139ad0901f72b29829989d88a75fd44edd1df8bd3a2e1079288"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x10) 13:58:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:58:11 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7e00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:11 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x4}], 0x3}}}) 13:58:11 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x200000000000000]}], 0x3}}}) 13:58:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000340)={0x7b, 0x2, [0x176], [0xc1]}) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x400000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x4, 0x30, 0x7, 0x101}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000180)={r5, 0x5, 0x100000000, 0x9}, &(0x7f00000001c0)=0x10) [ 1388.824054] binder: 29897:29901 ioctl c018620b 0 returned -14 13:58:12 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x400000000000000]}], 0x3}}}) 13:58:12 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x1000000}], 0x3}}}) 13:58:12 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7e01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1388.950953] binder: 29940:29946 ioctl c018620b 0 returned -14 13:58:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3, 0xc0041) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=0x0, &(0x7f00000002c0)=0x4) sendmsg$inet_sctp(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x5, @mcast1, 0x200}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)="c6d1b6c89da83b59a303a3d6c7f6c18a7ee9b194239020ae841704f41a591884c76fcaa734dc9754ea4a5477ac66d2b46b4272e555471ffe14a7b08012e295d9ca48c300c255a28b31bc5fa2aa1bbdfae79e6c7dcab00827f67dc45e10f7c17c4cb978880928fa5f779a0e6693c9039c96356b6b68a3c16bd0339869e32da6a1c2439018684d2e1015410ebe7bd443a71c1fe6dd819c8f8b7b74b191d2d1fef2fce4fc965056aaa1de998c9c3184e1bcd3b497946b62618a06a97a38adef85d7f73bb7ef8cddad1e0accaaa243d3b48aabb2094445749fc3ac8310ada153d063d26c8bb9875597abfa87a7e14c78", 0xee}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="300000000000000084000000010000000004000000020000050000001d06000009000000528f000005000000", @ANYRES32=r2, @ANYBLOB="1800f9ffffff00008400000100000000080005794a5e07e4eb9258"], 0x48, 0x40}, 0x24040091) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000540)={r2, @in={{0x2, 0x4e22, @rand_addr=0x3}}, 0x7ff, 0x2, 0x2, 0x8, 0x2}, 0x98) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="d2a0ac730000deff92a4f170404261891800000200000800e116000000000000"]], 0x0, 0x0, 0x0}) [ 1389.023052] binder: 29940:29952 ioctl c018620b 0 returned -14 13:58:12 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000240)="dfa0ca79a0bab00cac766f09d2c2b5566f4f946aea21b27ac015ef44e7a96a35", 0x20}], 0x1000000000000116, 0x0, 0x0, 0x8080}, 0xfffffffffffffffd) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}, 0x0) r2 = dup2(r0, r0) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000280)="7fe3", 0x2, 0xfffffffffffffffa) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f00000017c0), 0x23a, 0x0) r5 = request_key(&(0x7f0000001500)='asymmetric\x00;l\x8e\x9b\x12\x9d\xc5;\n\xfd\xb7Md\xfd', &(0x7f0000001340)={'syz', 0x2}, &(0x7f00000014c0)='\x00', 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000012c0)='.dead\x00', &(0x7f00000013c0)=@keyring={'key_or_keyring:', r5}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={r6, 0x7}, 0x8) 13:58:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:58:12 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x2]}], 0x3}}}) 13:58:12 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x2000000}], 0x3}}}) 13:58:12 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7f00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1389.294675] binder: 30028:30075 ioctl c018620b 0 returned -14 13:58:12 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x9) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:58:12 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x4]}], 0x3}}}) 13:58:12 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x4000000}], 0x3}}}) 13:58:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = socket(0x2000000000000021, 0x2, 0x2) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:system_dbusd_var_run_t:s0\x00', 0x2c, 0x2) shutdown(r1, 0x2) 13:58:12 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x7f01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000e31300000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002e80)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000002fc0)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002f80)={&(0x7f0000002ec0)={0xc0, r2, 0x21, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x98, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xde}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) 13:58:12 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x1000000]}], 0x3}}}) 13:58:12 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x100000000000000}], 0x3}}}) [ 1389.755008] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=43 sclass=netlink_audit_socket pig=30214 comm=syz-executor.3 13:58:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x2000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:58:13 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8000000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:13 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x8, 0x209e20, 0x8000000001}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x103002, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) recvfrom$packet(r0, &(0x7f0000000080)=""/238, 0xee, 0x2000, &(0x7f0000000200)={0x11, 0x6, r1, 0x1, 0x755d, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 13:58:13 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x200000000000000}], 0x3}}}) 13:58:13 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x2000000]}], 0x3}}}) 13:58:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000)="3eb7bcde28da7d05aa90ec27e4f834bd2781feaa6a62ff0b8099229517036a70430cd6b53c1cb0ece5f3e4c2602cefc6f39a66d5cc873ec420339eed3c3530977383a77b1dd70fca56f8cd4c659ac8f50bd10b4c2aee9adba71be9e8d9caa7582bcd9f5de5a0ce174b4310a48723df19aa6f547a39340d43009fdcd9e8a6bfbcf43524e4e8fc5bb9ee3cf4aa786973a883745253d6d3a0585f2ea5efef8052ca6d422e75d9de673287ade9808fdfcf4d62f305416ccf3854a11d9355307746b4e7b6fde74bc2a7eeafb468a89e37a8e35a3afe4e015f33cb5abb5cc71564ade2594a6225368b9b51", &(0x7f0000000100)="172d1328b4782d42229d05c69dcc15a6a12647097945258080ecaf390d3f2210fe583ce998ea0009e7a85c79c558ef9213b7d38d3c0622987f791b1e4304585df36b", 0x2}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000000000000000000000000000000000000000000000000000852a627300"/65], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 1390.074944] binder: 30028:30075 ioctl c018620b 0 returned -14 13:58:13 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x4000000]}], 0x3}}}) [ 1390.157576] binder_alloc_new_buf_locked: 9 callbacks suppressed [ 1390.157588] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1390.191499] binder: 30328:30333 ioctl c018620b 0 returned -14 13:58:13 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8001000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:13 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x400000000000000}], 0x3}}}) 13:58:13 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r1, &(0x7f0000000080)=[{{&(0x7f0000000180)=@caif=@dgm={0x25, 0x8}, 0x80, 0x0}}, {{&(0x7f00000002c0)=@vsock, 0x80, 0x0, 0x0, 0x0, 0x18}}], 0x2, 0x0) [ 1390.231233] binder_alloc_new_buf_locked: 9 callbacks suppressed [ 1390.231250] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1390.268543] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1390.321197] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:13 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x2]}], 0x3}}}) 13:58:13 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x100000000000000]}], 0x3}}}) 13:58:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e22, 0x36f7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffff}}}, &(0x7f0000000180)=0x84) 13:58:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="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"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0xc0, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000001c0)=0x4, 0x0) sendmmsg$alg(r1, &(0x7f0000005180)=[{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000003040)="eabddfcc6e353f363f8bdcd829d9cbdbf8d30bce6d70729596900af566fdb872887aaa51eeb3a97f1e1f66c2dafc7349c59bc5ec4fc4b247ad4caf6749f29b7019cf9a72a4b697442e1c4bb80e0cfc60be7eab01394ac9f05feac9ec1bfb4e9d577029a089a28b0ebbdb7cf905", 0x6d}, {&(0x7f00000030c0)="a4d232cbce5176512d3b2fe84f8bf82ecdf80b1bf02f29f21aa2a18fca7989a4e1705f4366a761fd0205328c47240a5397bbdbec179d4c949af559bece28f8ac62e30f27e61e884989fd806583f9b189f3f8203825108f759535e0f6720c06e9396b112bc511e738051e1b378a96e0415101279f53380c54098a765076ae3cae62dcb86512fcfc697a288ad8ebbc7f7758024d37cb142000044906d0b6c08ce323412e8cea567ce3946b0437763e1af0e39175a514ae55cf7a04f29b70a8f0cfbcf3a2f726062042ebd629b842ae4cb7c397778cb269a00ed8c26a82244ba71feb79289fd580f0bf591d9caf9288f39f46ebd4269b46fee9d7", 0xf9}, {&(0x7f00000031c0)="eb578637c5c79a21fb89123f2e7dd49c8a562fc04e9f95379878408caeaba62dee87bd905c0bc23f22696775dabcbc2f999ead1875919ad2867c100324a79e0ac905c7771117466378ba022b838f119577f8ddbe6a75165b6b5f27c90863bb7016e75b386070c78fc3", 0x69}, {&(0x7f0000003240)="1e1d6fcf62335ff1311d25b14d77889b89e8c90c2d233755d516007901323441f7364fc8eb2b265ca6bfe370ed5a2acfb8af234da2c8bdc12f749ff4d408bc81d44d71bacb414590bfd7eed0a9cd3ea4c370fa0b96a32aa1cf312cd8fdd803ed534ec7141d77feb41c2535ee4145b4e9d6084311a6c3289c52d1b3a53aba7918f0e519448fe0b891dcca4697d5", 0x8d}, {&(0x7f0000002fc0)="4a36f6c6885d63ec7352ba42960edb947ae2f19d66a3ca0fb1701889d5a409305f9540af99fea0f45b148be4fc4ac0ee", 0x30}], 0x5, &(0x7f0000003380)=[@assoc={0x18, 0x117, 0x4, 0x100000000}, @assoc={0x18, 0x117, 0x4, 0x7f}, @op={0x18}], 0x48, 0x80}, {0x0, 0x0, &(0x7f0000003400), 0x0, &(0x7f0000003440)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x18}], 0x30, 0x20000000}, {0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000003480)="41e5ade1b15504374c0afc0e1529306b8bb7bfed11a12fc0ac3949ebd8416190618b58ae758ba0bb7410313777cf11b10318174ec6cf3651f41df1e3d7883fb5e7ca8f75a3b4cc3914a6475452b1ba50adc505637d51b7b443e4c7d22b7efcd103b3e2900543c3dfa884a176e47ca2f6d08011092c0c77ca9f3ec25a266091d58a48ea3eaf2f1260e12ece263b819ea0087eb95bbb7d61f6b6d0051bc3", 0x9d}, {&(0x7f0000003540)="5630ed51f84b9c4f6d6c04", 0xb}, {&(0x7f0000003580)="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", 0x1000}], 0x3, &(0x7f00000045c0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xe8, 0x117, 0x2, 0xcd, "922564594bd6a03b4847da0126df07d3d61024ae3afb14a5656902248b4119f2d875b00f9ca6c856a4105d691f1671171c51b6a927c41546d164f7d75c84c25e8551082a6c0721eb2ea528a1c9534d10a60fcb94efd9d91beb190d19e71950957171448c0ff21bd868d19239709bda6fad7affddbaca36fc5fc839de55f95c2c882340eeff10961da792fce5d6be3309d4db56fca3d660349aa6513d828b9d1fa4200c6c51eddc1a1a1c399675580dcbf647a4bd91e48f2357398d75a303628965247e58ce03f650d175bb7ea2"}], 0x100, 0x8010}, {0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000046c0)="793c9f38983d919b89a85ffe514320db264ae573073605098332", 0x1a}], 0x1, &(0x7f0000004740)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0xa8, 0x117, 0x2, 0x94, "4a30edae582579e31f0b56102023a03e361ec1d89dd3ff7b392614a21b14525b52854b5aa3cd1a882a156402d0f1801d26757fe571114b938bd260c28f7f1e6d8c3c69a9a57673c566dc8e57090a790b687f3b8d0428050f7410511a6c98987ee7e340cfa49bb60af8c70da448b456289ef6f357631e95788fa89ab06335e2fda4a5be3b013031773c862d2390f0b35349966869"}], 0xd8, 0x4000080}, {0x0, 0x0, &(0x7f0000004bc0)=[{&(0x7f0000004840)="fad98c9e763e44bbb0a20cdb06f3a421a68d9bbb592584542520eb79b5ab12544774253361bb1169d626999424e0b13d83cd32eba45cfbb81c6a", 0x3a}, {&(0x7f0000004880)="5083f6613bbbe3d03754f60b6f144a3f1b10f3cb7813d40685cffece16b563468ac9f017ee5bd1d59c8a41ccf8a24867907dbde15b0cfceb10a864422a3bc55d5ae9b1bf036da6f9241cc2a6646e3f753aa4c5d7bf4b5a3274ab40ce276f6cb2a04f64d42a2b5bc9117cf89b772f6c88f30a75a83896b6fa9cbd9af2c67ba525cf259c2fde64b456dcc84d70e0109aef58ee43a8bc2c21de55740a04b82f84092797212907373b9dbbad072ef2e1aebf0bc7808699a6cc69d482d395294f990bef811642bb7db69d8a543df00f110046e1c6", 0xd2}, {&(0x7f0000004980)="6e7b784f592fd4bebcf4f456891692ea1aabad75feed26b7595b158f1abfcf4751e0fe98b870321004ef8d810c3960c3bb31fb3a7aa34b194ff1c3065957d2b8385eb9316bef9c5cac96d5dd3bb413d8e565c1e2a0e91b07ad2abb5455bf37bcabedb665bfe27b5a6d454cc91ae3e15fb4db00e1607adafea8ddc3a28ccc4d604c2a81149d5961dffcacd011c34c24d5108f7b0d9bf525412ea672bc24822e8e5e6ad0b6036e2179123b2570780009f269836553c1367d12d2d1b646f3c5db66fc268cf4b0c8", 0xc6}, {&(0x7f0000004a80)="253c0b6c409e", 0x6}, {&(0x7f0000004ac0)="7c81228f922fce9387da19183e507db6210eccf99bbac542714e8ae6ed13d60f760e4af598fc06ddf115fafb21ab3bb943a2b35a4c641f621bb2795f9d30a9af4a1cea103acd86c9993d0adf3e31e10d0311939366b560f40c78c5fdbc73ec101b00c8e9e76f9731121e72bf8caa5a249b09856113810c", 0x77}, {&(0x7f0000004b40)="4054315e57ae9cfeec1c92a938b38a79fee142ae933f8a4637c50a068162d6cda89d345df00ca8c7cf960914ee9225fe079db0134b5838fc997de5f4", 0x3c}, {&(0x7f0000004b80)="4699ee0808441d61d60aa9c875293cc7e0048ec538aa16154a0c690cdba475313bac3b708a6034075af8d067c3c1", 0x2e}], 0x7, &(0x7f0000004c40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}, {0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000004c80)="d72f2ca0f7b2c9480cf64aa9b6572c37e97b5fe1d044ffea5575ec28c2f0b6029c8034d63eed4369ab46c79d076871ca264d367bc4321f84c9d0ab33a93dbc13a22bad16b12ad9855f91950cf0233b5dff0fbb09f5221cca528804bf26efc86a5190f1305e34e7756d7ec9b118c28647641f00d3f94c97633f55e49dd35e133708a2219434b57a0a60f7aef0467570248252c46d5b891aa0d9cffef62ec1db4e9d2c09139091cc5c5a41b488345d7c646296f2f18c77e5853d", 0xb9}, {&(0x7f0000004d40)="3701a70d047b13323768616c454692b29fe49634e6c681889e6ba64067fe4fcdc5a706740cfe1902951767aa9d6cf8b5332771b9055fc986fbe4f71b771699c63d732ad4090e44e5860eb90ff1ef35f58891020a979ad2b86c451316728d0ae8", 0x60}], 0x2, &(0x7f0000004e00), 0x0, 0x4000040}, {0x0, 0x0, &(0x7f0000005100)=[{&(0x7f0000004e40)="d083871de832e5a80e3d58586c7ca1d47bfdcb0c28e184064cbdaf7cce2588082e246c6a274f8ee55872a0dc8c90d6abec8545d5b9cd41823c1b284a941d5e42cf0a264eb91e96fed86a0a489c84642c8e8d96aab37c4b8ad66e8bbae65f6d72b5642f936b5a1915f9b81c8f5560b5c3a49a614b93d990879d05", 0x7a}, {&(0x7f0000004ec0)}, {&(0x7f0000004f00)="24ece906688e6218366a14f3cec3ae6a5d52481c9a13dd586e0fb7ef49ebd19658ef6d4a1f713e3f169985f1c412bb90e0501714b366a2188d02c2dccfc9fdee03fc3be957503e27977817e4d7c6fa", 0x4f}, {&(0x7f0000004f80)="307a3d2df21cdc2d72242f41e72820de695d468818662f0c4b833722046729eccf726d860685c5e16ba6744e5834d4631591ca8d5f65ac9a91b1f42dc4268f1a8ff02ac3d75ad94aea94c9f7ddd6dcd6f69b73eba3fed1efeb09d8e414dc9c3cdc70cce027be12f86953a6d59cccf6953c9c02f1b6bde21dec6c4a7f73d32ef7cc1704bbbb1732afa8f88b0630abf42c94fe1b7da399c05133bed96a283e1ee90e6c4f7ffc45c310694668dabf4759b08a8586", 0xb3}, {&(0x7f0000005040)="43a6fb60e8c40d4c53e413d8ced3dff20967c849da44302c330e6a0ba2e278fc5942080486ac2b277bf6c2cb5e5779e161abcd3a6cce72b33fd0978c85d7e8f5dcfa5e4bf770a3cdedf92afcc5a5ee6b31aa08a9b034203b9eb1e78df7a18f890ecebaea09b57ed6cd81156b04548c937a6144b3e4a3684bfadc8bb308a26ccc074e7fd74db5b55683a229bc983f9a5e7faf2fa9189ecb301f444eb661e4c936", 0xa0}], 0x5, 0x0, 0x0, 0x4}], 0x7, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8010002}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0x1e0, r2, 0x609, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x11c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffcfab}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0000000000}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x59}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb445}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_LINK={0xb0, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x98cc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff800000000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000003400)={0x2, 0x4e24, @empty}, 0x10) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000100)) fstat(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f00000007c0)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000800)={0x0}, &(0x7f0000000840)=0xc) sendmsg$netlink(r1, &(0x7f0000003000)={&(0x7f0000000040), 0xc, &(0x7f0000002f80)=[{&(0x7f0000000200)={0x10, 0x15, 0x12, 0x70bd2a, 0x25dfdbfd}, 0x10}, {&(0x7f0000000280)={0x10, 0x25, 0x8, 0x70bd2c, 0x25dfdbfd}, 0x10}, {&(0x7f0000000880)={0x26e8, 0x2c, 0x1ab0095273ce74f4, 0x70bd28, 0x25dfdbff, "", [@typed={0x8, 0x45, @uid=r3}, @nested={0x1184, 0x6b, [@generic="20fd348f784aa6c9cc3396e5dc5268158f0a43725d9b7f859f4887bcbcb4dab108c5af28a5896ef134ac977b01e60bf2a2cad7d7323e22d329d13d06b5564d28ec9c58e808d27c8549c4d597b8b0e67654bc05573bd69cc6e1037e21479fbda55f60bd0b3eebdac1e7ffc3aec976fd8ed8c8a97f3445712ff28905b5966a7370d9d32b3c710ca78f0168138051c43815e52e815f49061a15dd66bdc3fa4f636baad0035b5059b09853d503b405942b4b43220a7c2b76cef7ca7ca6828661641fa38f79eb82db77718559b92018d3a632e9b4ebe2051d6c066c0b5d1fbf07ce34640c52", @generic="910b1be67d280ef5af99a0f06b9371fbaf2ad1880fa6ceb7020954118764c601546158c3e87391fb201e93ad6001dc1d31ef565cb523194aec5e33788823c6211c21ab423f6f4f2ce2e9a0a32116e65db862e03ae9ab307ccf1684901a95611523d00ee2e40bd1b041d623422690d2801550277aaeaa29f35acc3766c0501056347773cfc8c447b74461aa10439df3c93322fa1c", @typed={0x8, 0x15, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="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"]}, @nested={0x58, 0x24, [@generic="39aeb058f2739c36fa9b764ed310e2cfb76aa7548ba90de1ff4501eea92f46c0383b547bc6a42e7e3854cf5b8f2a2c6e3e4846934a86251f55b587ddc326a4d7893210cb4699dc", @typed={0xc, 0x60, @u64=0x9}]}, @typed={0x8, 0x5b, @uid=r4}, @typed={0x8, 0x85, @fd=r1}, @typed={0x8, 0x57, @pid=r5}, @nested={0x12f8, 0x5b, [@typed={0x8, 0x2f, @u32=0x4}, @generic="aff209e471eb654d236cf7b8bc1a01b6c57d9dbed152f52debd104bb483369c17305ae950de23f2f2e8eaad8445a0689cb789d50fad5ecdebf977e29be82634e5030792e68eaae03bb47bf2a832be9907626a44c12729e2e8269741681f82d04999ff1f811fa121ba8af099308e3", @generic="b6e965ce80f35853ed61959047e1bc67ff87238da9568f33d9cef6f752672eb4424fa5d1dc79453fa90faa1dc28d149be7ae3a5e86e462f59a6889e44708a97a50fa8aaecff6dbb0d4ba0e11eda6c1dd54b0d01211f99ae454844355aa03e13668dc29cd9202b33e1e2446d641d8a995c3678f93d7cc8e8f943b173aa14cbb278b5218fef6df80c24b062e0afe23e1b6cf794d9f7173c9ad400a65cc7422fc184b11bd5582c32295df016ad3563e21e28c375fed9c6e9ed6748eb3f701f79744005b9dda16b599cf881b4780da49c0b4eb3ccf20862b7cc8939898374478800a13337a2422006b9d", @generic="0397637d26965b6f1a0dde1e73ca0de1b3dcdb5c78fb1d331ba30e50211631c3c90d66de27f1fba32fe4f8907d21e349a96054f5decaf53238b6c0d0bdbab00bbeb6a37ec1cd414170ac836f807a3487a1f26154b404b0ddb95acd1d10a5f25bfc807e0345f19fcd9a919eae45582946b71ecfa506df4359ff59d132d638d04ae883293c3505c36c54fa0040fb85b26eccfb602d5f1da12bb638ae56c1a05f81b116106af55f55de65159a8abefdfd2969fbd15635fc3c58e6d298f6327da0d172d1c3b9a5c808a02aab966760d7054402ba972a393306f4ee4505e7b6c687d657838421a1e0c644084cfcb42279500b208599a206faff84", @generic="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", @generic="8c777c2104699bcd0d5f2cafc13cebf4748ec0eddb55578f382d9d84b5ff563170c4ffe23d7d628d0390d845b94603c1bd7d13b227ed55bef18d13d1351fd822fe4a965cfab0b4de9b01a60058", @generic="e742f59b857c43bc39fe6b3539646b1530dc5a0663c6eaa975f161113025a016f4d888e170235a195db936fd9182e0c4bb4e7fae6b4600e1dce3f9accc70f18cbee59dbf3752eadef49538e7376b34da82"]}, @nested={0x11c, 0x10, [@generic="510fd787daf647a247822311dfb4036c20fe19ff6b57fc8c04e8db38cfef0c74b89a0533d824f9700e919b47c96b72349e21c09ef8a3a3f807908a1de28d85175fad073f4b8c51e1a89d3314baf5464627184be9b59ec0b69009d65ef8ebc417cbdf66ff015b2a312f8735e7abf2b7681d876af137edd50cac49580a5eb4673576186fca541ef63a5cfb8e8113647a4850b8d5b491b4f2f27db38dbaa60c186bfccfb1b14acc5ff6bc7ed491f6deb1b229aee672f7f4d124c25ee67f27b55670ac1ee746a35e2b795b9d1441250898a1994641e55ce56e62907a", @generic="496a284cd4176c996bb709517fd3504379d2dcc6c51adc", @generic="1dd2bc01b4837a60580563db392715ee8063da79", @typed={0xc, 0x92, @u64=0x2}, @typed={0x4, 0x8d}]}, @generic="f920905018ce55fac205ccaaee155d7d6bfe053731982e3dc9340779374be8a2198d0ad4338fd0af2a72421569a226a499d73dbea26dbd7f8a888ca264deeff51c3bb929b5c5be13334c43790841bfd9bef0b1646186d67cce6f8afa76fea9873aef6cc153ea47e4b99f21b276b451e3aaf1f599a17594c5ff5262defb35a22dc4519ab4771ff75c07b888472ed34e35fbc3c9dd0141b71b9da69d3da760d34928b4fb8b8404dcb4ada21de3e728e0db8e075e2dec86df4e9b6357c3559783d3c3", @generic="56c44d68424b4a"]}, 0x26e8}], 0x3, &(0x7f0000002fc0), 0x0, 0x4}, 0x20000000) dup3(r0, r0, 0x80000) 13:58:14 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x4]}], 0x3}}}) 13:58:14 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x200000000000000]}], 0x3}}}) 13:58:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 13:58:14 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8100000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1390.978849] binder: 30328:30333 ioctl c018620b 0 returned -14 [ 1390.979212] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1390.992763] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:14 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x400000000000000]}], 0x3}}}) 13:58:14 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x1000000]}], 0x3}}}) 13:58:14 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8101000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1391.121000] binder: 30474:30481 ioctl c018620b 0 returned -14 [ 1391.197854] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space 13:58:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x2, 0xc7b, 0x51f, 0x1, 0x3}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYBLOB="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"], 0xa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="046340400000000000ec8300000000000000000000000000004800000000000000180000000000d715b44ae963ca558bde98", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 13:58:14 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x2]}], 0x3}}}) [ 1391.238058] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:14 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x2000000]}], 0x3}}}) 13:58:14 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8200000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1391.376298] binder: 30593:30597 unknown command 1077961476 [ 1391.413321] binder: 30593:30597 ioctl c0306201 20000440 returned -22 13:58:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x3a7a, 0x8, 0x1c, 0x10000, 0x100000000}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0800000015e578b18aa120248d8824620e5c09377a064b145cea8d2e9ec178bddc6af92d95a8e5751b2c5507ec0efa1a08cd09970fe31cb531d2db50c8e84ff1f94dd1f45c509db7ba4372beb85f4f2d8ebf990f8b818553ab9c6fbbb31ed9df0786bbc8c2f3b9b88b50757878c703e496f84acbaf8cb0abc08772bd6ab1890c4e5da176653b17e1c972"], &(0x7f0000000140)=0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x2}], 0x1e0, 0x0, &(0x7f00000003c0)}) 13:58:14 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x4000000]}], 0x3}}}) 13:58:14 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8201000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1391.899736] binder: 30474:30481 ioctl c018620b 0 returned -14 [ 1391.899935] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1391.914665] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1391.972575] binder: 30712:30715 ioctl c018620b 0 returned -14 [ 1392.052757] binder: 30712:30720 unknown command 0 [ 1392.057694] binder: 30712:30720 ioctl c0306201 20000000 returned -22 [ 1392.769883] binder: 30712:30715 ioctl c018620b 0 returned -14 [ 1392.770904] binder: 30712:30720 unknown command 0 [ 1392.780693] binder: 30712:30720 ioctl c0306201 20000000 returned -22 [ 1393.221935] Bluetooth: hci0: command 0x1003 tx timeout [ 1393.227671] Bluetooth: hci0: sending frame failed (-49) [ 1395.300936] Bluetooth: hci0: command 0x1001 tx timeout [ 1395.306749] Bluetooth: hci0: sending frame failed (-49) [ 1397.380924] Bluetooth: hci0: command 0x1009 tx timeout 13:58:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 13:58:24 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}], 0x3}}}) 13:58:24 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8300000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:24 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x100000000000000]}], 0x3}}}) 13:58:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x15, 0x0, &(0x7f0000000040)="22bf441791b27ebc5126fb4298dcdf40443b914e26"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000180000000000e1ff2f00000000c1ff00"]], 0x0, 0x0, 0x0}) 13:58:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x7}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r2, &(0x7f0000000080)=0xfffffce9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e21, 0x100000001, @dev={0xfe, 0x80, [], 0xa}, 0x5}}, 0x6, 0x81, 0xfffffffffffffff7, 0x100, 0x1}, 0x98) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x10000}, &(0x7f0000000100)=0x8) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000280)={0xfffffffffffffffb, 0xc, [0x8, 0x0, 0x100000000]}) 13:58:24 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000]}], 0x3}}}) [ 1401.597558] binder: 30724:30729 ioctl c018620b 0 returned -14 [ 1401.604211] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1401.636664] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:24 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x200000000000000]}], 0x3}}}) 13:58:24 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8301000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:24 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x2000000]}], 0x3}}}) 13:58:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000002a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) socketpair(0x3, 0x0, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x8, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x48080}, 0x40000) 13:58:24 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x400000000000000]}], 0x3}}}) [ 1401.897697] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1401.905952] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1401.933405] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1401.947461] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1402.397556] binder: 30724:30729 ioctl c018620b 0 returned -14 [ 1403.700925] Bluetooth: hci0: command 0x1003 tx timeout [ 1403.706375] Bluetooth: hci0: sending frame failed (-49) [ 1405.780930] Bluetooth: hci0: command 0x1001 tx timeout [ 1405.786376] Bluetooth: hci0: sending frame failed (-49) [ 1407.860941] Bluetooth: hci0: command 0x1009 tx timeout 13:58:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 13:58:34 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8400000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:34 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x4000000]}], 0x3}}}) 13:58:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x200, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000040)={0x7c000000000000, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}}}, 0x108) 13:58:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340400000000040000000000000000000000000000000000000000000000000000000180000000000000008000000000000003c4c5c27d924b7f16facbba730b96bf9cd7327b68919de1267f56efeab0c3599f7ed80a5817808d3269997d28d381cd22a117fcdc7565bb9e5717704de41bf", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:58:34 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x2]}], 0x3}}}) [ 1411.841812] binder: 30964:30971 ioctl c018620b 0 returned -14 [ 1411.854842] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space 13:58:34 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x4]}], 0x3}}}) 13:58:34 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8401000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:34 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x100000000000000]}], 0x3}}}) [ 1411.893740] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1411.920531] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1411.955465] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1411.982231] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1412.005351] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:35 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x200000000000000]}], 0x3}}}) 13:58:35 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8500000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:35 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x1000000]}], 0x3}}}) [ 1412.629081] binder: 30964:30971 ioctl c018620b 0 returned -14 [ 1412.629280] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1412.644057] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1414.020871] Bluetooth: hci0: command 0x1003 tx timeout [ 1414.026386] Bluetooth: hci0: sending frame failed (-49) [ 1416.100901] Bluetooth: hci0: command 0x1001 tx timeout [ 1416.107481] Bluetooth: hci0: sending frame failed (-49) [ 1418.180888] Bluetooth: hci0: command 0x1009 tx timeout 13:58:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 13:58:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x25, 0x0, &(0x7f0000000300)=[@clear_death={0x400c630f, 0x1}], 0xfffffffffffffcd8, 0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x800, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000080)=0x400, 0x4) 13:58:45 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x400000000000000]}], 0x3}}}) 13:58:45 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8501000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:45 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x2000000]}], 0x3}}}) 13:58:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000230000000000000000001800000000788f673fd667b1ebaa05a3760000000800000000000000c2c961fe329a49ebde1956844c4cfe1ce00c7c8d7adafee4c47e3169a31e6dcf10b2808d4309e1d6a2c8fdcca741be206d0c233cac6df518d559133d2240bdded461dcbb00546650", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x311080, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000180)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000001) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f00000001c0)=0x1) 13:58:45 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}], 0x3}}}) [ 1422.054934] binder: 31107:31112 unknown command 0 [ 1422.072956] binder: 31110:31117 ioctl c018620b 0 returned -14 [ 1422.080688] binder: 31107:31112 ioctl c0306201 20000000 returned -22 13:58:45 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x4000000]}], 0x3}}}) 13:58:45 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8600000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x28, 0x0, &(0x7f0000000080)=[@exit_looper, @clear_death, @acquire={0x40046305, 0x1}, @free_buffer={0x40086303, r1}], 0x1d, 0x0, &(0x7f00000000c0)="1fc20a174d5af0fbfea2c1f56f49025804ddbceb31a58ca1e953cc4828"}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x501600, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x20}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000480)={r3, 0xfffffffffffffffe, 0xb4, "2e1375f9211715867e77dc77d3c63fe7b6538ac5984b02c60ced00483fc5d64f80f0e4861ae45994ec125ac4831f16215ab23b8b7be679705a9ff147946619b3a4e7fe08dbdb13eabb6a0fad2a8931654f61294dc2352c1b304b5517773ad778454418b5922f6ca22fe791ba9e178178b192abadb76df1d2492fad9bd5ffe3b1985c7cb217a176d3576d40329a1b06aa766c3671996398e23f13f9e6e2fb44d1b25928504343d930b920c41de6f09c5eb222a28a"}, 0xbc) 13:58:45 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}], 0x3}}}) 13:58:45 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8601000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1422.319382] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1422.338680] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1422.864646] binder: 31110:31117 ioctl c018620b 0 returned -14 [ 1424.180865] Bluetooth: hci0: command 0x1003 tx timeout [ 1424.186281] Bluetooth: hci0: sending frame failed (-49) [ 1426.260869] Bluetooth: hci0: command 0x1001 tx timeout [ 1426.266292] Bluetooth: hci0: sending frame failed (-49) [ 1428.340903] Bluetooth: hci0: command 0x1009 tx timeout 13:58:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 13:58:55 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x100000000000000]}], 0x3}}}) 13:58:55 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}], 0x3}}}) 13:58:55 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8700000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018400000000000003000000000000000"]], 0x0, 0x0, 0x0}) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x200, 0x0) read$alg(r1, &(0x7f0000000040)=""/159, 0x9f) 13:58:55 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x86, 0x1b7f, 0x7, 0x6}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000300)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, &(0x7f00000003c0)}) 13:58:55 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}], 0x3}}}) [ 1432.315300] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1432.323287] binder: 31351:31355 ioctl c018620b 0 returned -14 [ 1432.353971] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 13:58:55 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x200000000000000]}], 0x3}}}) 13:58:55 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8701000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f00000000c0)=0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) syncfs(r0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "52dba8d05c229dd4", "c13f05a442ef9c228546ad5cfc360dd785cafb9667e3b90332156ca00f8ed3be", "7b624bb6", "ccfb5de878c7d7bd"}, 0x38) syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x4, &(0x7f0000000280)=[{&(0x7f0000000480)="aea339fdb28a5248a9a3402ba8fbb6397a4c8eb40e1b4001d2483af5db0dc960b7afc7f12cd0f8371542d33b8004ff94ab58960e9ce6784acf9068b00a8dfdd51d76107bb2f61cb2a7e19d0ef51f03b729daaac7846722766af35e45e50fdb707a51ec5aeb3c1a2fb3e86a3cfc7f002ac4054383a5ec7c78f8727812cbebbe3d79b9ad2e2eb6b1359d66145a64cc51b55781ff66f9225d21208943a3a77f073846930dd3a0275fdc16cfe37d6e51c43dea062eb7ded9d7adf99b376998793cbe3951b92e63943c553ea249b7e7b38c01", 0xd0, 0x8}, {&(0x7f0000000180)="e2133b028d6f09c084dbfc", 0xb, 0x3}, {&(0x7f00000001c0)="31eb20d10b2dac167620e4ca3faf5a1869ec60836d632c244750ed0ab0f99f1d297f09749002928c19b3e6273cbcb7980acd8d", 0x33, 0x8}, {&(0x7f0000000580)="a62c48f3b9461660f0870b796b909f418190445271e9a7ee80f2edf5d2dddb0531e49bca29e22c0c1bc8ac03d02c8ab64315cdfcc62813180fa759b8e6f63dd390a97facf428c31caf8829e80c299b160a41dcd978e2d68af485e4877db1f693b7af7131e46e32a6d3ed4a9ebce8e356c82dc01550b00d325b521535a6926fa999cec0d4bf2450419b0da3f125b93849feb518fb3d98ea249f3ba23361b10ebc8d", 0xa1, 0x9}], 0x4, &(0x7f0000000380)={[{@inode64='inode64'}, {@norecovery='norecovery'}, {@nogrpid='nogrpid'}], [{@smackfshat={'smackfshat', 0x3d, '/dev/binder#\x00'}}, {@dont_hash='dont_hash'}]}) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000040)={{0x0, @addr=0x4}, 0x8, 0x4, 0x7fff}) 13:58:55 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000]}], 0x3}}}) 13:58:55 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x400000000000000]}], 0x3}}}) 13:58:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) [ 1432.624558] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1432.641648] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:55 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8800000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:55 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}], 0x3}}}) [ 1432.704263] XFS (loop3): unknown mount option [smackfshat=/dev/binder#]. 13:58:55 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x2]}], 0x3}}}) 13:58:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200001, 0x0) setsockopt$ax25_int(r1, 0x101, 0xf, &(0x7f0000000080)=0x6fb, 0x4) 13:58:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 13:58:56 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x4]}], 0x3}}}) 13:58:56 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8801000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000005b8a10e852d742596ebbce06d972135f000000e9b7495b793402580000000000ce6716a569683fc10b5e92323385f1e2acea807e3c63b8f8bc5289a0bcf08d43db3a14eebbb5110bf8857933d547042f9e27bc0074d7e3b060ea1fbb33f95f08be49bdfc72bc324e1c277b56cd5f803d362d00f1373fb2829626abe9146c77a693353bcf48af260226211e3cccf866f492627a764e6d96b76133ea14f64ded0f7f", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) r1 = dup2(r0, r0) accept4$netrom(r1, &(0x7f0000000140)={{0x3, @bcast}, [@default, @rose, @null, @bcast, @default, @default, @default, @null]}, &(0x7f00000001c0)=0x48, 0x80000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x100, 0xb, 0x4, 0x20002000, {0x77359400}, {0x5, 0x8, 0xb9f, 0xf6, 0x3, 0x7, "34c0dfcc"}, 0x6, 0x2, @planes=&(0x7f0000000080)={0x6, 0x10001, @fd=r3, 0xfff}, 0x4}) 13:58:56 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}], 0x3}}}) [ 1433.108906] binder: 31351:31355 ioctl c018620b 0 returned -14 [ 1433.165492] binder_alloc: 13562: binder_alloc_buf size 8744664155712651832 failed, no address space 13:58:56 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x400000000000000]}], 0x3}}}) 13:58:56 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x1000000]}], 0x3}}}) 13:58:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 13:58:56 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8900000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1433.219466] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1433.238778] binder: 31621:31623 ioctl c018620b 0 returned -14 [ 1433.336978] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space 13:58:56 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}], 0x3}}}) 13:58:56 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x2000000]}], 0x3}}}) [ 1433.406532] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:57 executing program 1: syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x7, 0xa0400) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:58:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x101000, 0x1f9) sysfs$3(0x3) write$P9_RVERSION(r1, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x2b0, 0x6, '9P2000'}, 0x13) setsockopt$inet6_tcp_int(r1, 0x6, 0xd, &(0x7f0000000040)=0xbff, 0x4) 13:58:57 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8901000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 13:58:57 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x4000000]}], 0x3}}}) 13:58:57 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], 0x3}}}) [ 1434.036618] binder: 31621:31623 ioctl c018620b 0 returned -14 [ 1434.041164] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1434.050323] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1434.096841] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1434.110986] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:57 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}], 0x3}}}) 13:58:57 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8a00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:57 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000040)) 13:58:57 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x100000000000000]}], 0x3}}}) [ 1434.156999] binder: 31761:31764 ioctl c018620b 0 returned -14 [ 1434.231930] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1434.299339] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:57 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8a01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:57 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}], 0x3}}}) 13:58:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000020eb191d2dea943775e1ee917220d72cfbe1bde9ebfd90360092470794ce6c6a940b732459f85e9d2f0ca527dc799e772e10ee14b808dd28a269baa60c7cb70ed9e92a0cb522701570ec435f6eeb2e7306374f443b94726acafb9d5947a55d17f1f989383f82e1d9569a6a1b786018874b061ed00b78adb33a9e50e13b9ff4ef8c106bce99bc643a2c0300ec18f88413cce6e83d4db14e1c3da873bd14f73884c1d87116c88f2b22f6545dad81e6afe5ac7ac08d0cacfd50cb5fdf60d07f24045421a0dfc92bd29832225fb9c01c7dc6659cdad141a2cbfbd2a6bba3c722"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:58:58 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x60082, 0x0) accept4$ax25(r0, &(0x7f0000000040)={{0x3, @netrom}, [@rose, @null, @bcast, @netrom, @remote, @bcast, @remote, @default]}, &(0x7f0000000280)=0x48, 0x800) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000140)={0x7, 0x6, 0x779, 0x9, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) open(&(0x7f0000000100)='./file0\x00', 0x628800, 0x11) 13:58:58 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x200000000000000]}], 0x3}}}) 13:58:58 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000040)) 13:58:58 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}], 0x3}}}) 13:58:58 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8b00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1434.948875] binder: 31761:31764 ioctl c018620b 0 returned -14 [ 1434.949074] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1434.962710] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1435.023706] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1435.050982] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:58 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8b01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:58 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}], 0x3}}}) 13:58:58 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000040)) 13:58:58 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x400000000000000]}], 0x3}}}) [ 1435.091446] binder: 31903:31904 ioctl c018620b 0 returned -14 [ 1435.163753] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1435.199056] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:58:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x20000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x298, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x393}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffc01}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xda87}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0xa8, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd539}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8d7}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9b9e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x76}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9d3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff7}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000740)={0xa3b, 0xa, 0xf, "314b068e3509b2b66871f5510879a95db7f0bc005c2a5f121062dcae1ebf961bca1429fbe162227613a1b512f5b2607d283b1aecb853470a15a40be6", 0x12, "98e1a0c089b21c8f5ab492e5cd139718be09b9fa85b0db0797b20ba158c7b8834a90cef514c2eb270e1ed46fdd56d8666c17c50cfc5038c34aaaa173", 0x20}) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r2, 0xc11}, 0x8) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:58:58 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8c00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="170b58d487a90c654cb9", 0xa}, {&(0x7f0000000040)="dc43eb8a04325872d743ef466a222c30133c6fc241b4c8e5bc4fab0860adc6f235322d90f273e8c2efe05871403904da2baae6a30ca0429b43d552ac35261500654fd6afbfe1d5ca4cfb2ae7ea8a844dd17140a9b0230c13d3fe98feafbf77c65373e0f130a6aaf8f5", 0x69}, {&(0x7f00000000c0)="4c0128541e9f311b14f03c", 0xb}], 0x3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000010000000000000000000000852a62730006000000000000000000000000000000000000852a62730000000000000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:58:58 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x2]}], 0x3}}}) 13:58:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 13:58:58 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}], 0x3}}}) 13:58:58 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8c01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000ea6098360000000000000000040000000006000000000000000000000000976cee7c2fa9eb480000000000000018", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) ioctl(r0, 0xffffffffffff8000, &(0x7f0000000000)="9b0f2e9ae3f089e1ddcbb64c666812b04795ca96d429b8b2cb92834a236624985a421fe210b081357e7a99e3522f52ed5a0813ae62b8889f044c39705eabb088490aaf6b5ebd29daedd4bd7e605b6c1488d75084a7d58d4f444f406f36589aed154ab782e4fefca3dd521592af216e6d04cf3901e46e2e64270d1454223ae17c39db0e4ec5216f514a3994148ca70e8338548fc5dbd043897d3854d8604d9bac00a392880313f019fe3b4b2d3020a6ce372c3516bde48a2f34abd1f04c") [ 1435.885828] binder: 31903:31904 ioctl c018620b 0 returned -14 [ 1435.948909] binder: 32134:32140 ioctl ffff8000 20000000 returned -22 13:58:59 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x4]}], 0x3}}}) 13:58:59 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}], 0x3}}}) 13:58:59 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8d00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) [ 1436.002574] binder: 32142:32149 ioctl c018620b 0 returned -14 13:58:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a627300000000000095e1000000000000000000a773e8192f08df29e144219b39000000852a62730000000000000000000000000000000000000000852a627300000000000000000000000000000000000000001c730e86a58a9965bd57cd25d7f3d91ffa02c05fc0e4d6e122f8258d6a06487b96d93bb4ddacc03230bb253536628f9763076a2e1c577847b6fe165d9f5220612afd6369278255d6"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="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"]], 0x0, 0x0, 0x0}) 13:58:59 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x1000000]}], 0x3}}}) 13:58:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='/dev/binder#\x00', 0xd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xb0186010}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08012cbd7000fcdbdf250d0000004c00030014000600ff02000000000000000000000000000108000100000000001400020074756e6c30000000000000000000000008000400020000000800040005000000080001000100000008000400fdffffff2c000200080006000800000008000900030000000800050001000000080003000300000008000800f8ffffff0800050008000000080006008100000008000600ef0a00004000020014000100ac1414aa000000000000000000000000080002004e200000080009000600000008000d000000000008000e004e2200000800070000000000"], 0xec}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000380)=0xc) r4 = getpgrp(0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x80, 0x0) setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f0000000500)={{0x20, 0x1}, 0x10}, 0x10) rt_tgsigqueueinfo(r3, r4, 0x30, &(0x7f0000000480)={0x2a, 0x1, 0x40}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:58:59 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x2}], 0x3}}}) 13:58:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 13:58:59 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x2000000]}], 0x3}}}) 13:58:59 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8d01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:58:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x84, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000080000000000000000048000000000000003800000000000082f2b6510700000000000000000000000000004cb780d6c70053999e82d758c2eec76bafa3754d50974cf4fce670f7f1eae2d386174d419ad146ce38bbc61edb9e341d2c2f", @ANYRES32=r0, @ANYRES64], 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x468000, 0x10) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000040), 0x4) [ 1436.798371] binder: 32142:32251 ioctl c018620b 0 returned -14 13:58:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 13:58:59 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x4}], 0x3}}}) 13:58:59 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x4000000]}], 0x3}}}) 13:59:00 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8e00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1436.928889] binder: 32291:32317 ioctl c018620b 0 returned -14 [ 1436.995637] audit: type=1400 audit(1560693540.031:110): avc: denied { getopt } for pid=32291 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 13:59:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x200841, 0x8) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x1, @bcast, @netrom={'nr', 0x0}, 0x8000, 'syz1\x00', @bcast, 0x81, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000001800000000000000300000000000000019164aa85a9ea9c27783c2000f332a11f2f966f1ffedec9d591d8e7eb730d05ea193d9fee34e8ce0417a4e03827f88fc72daed0c62cd52bc6d4a6a8826a616e4434ac6acc3cc43907999f0a998273c82b28300fc65019449f0f9709c2d8c77ce52686d7b0d981d38a9f475cf69854ef151d9048a87"]], 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x7, 'syz1\x00', @null, 0x7, 0x8, [@bcast, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x130) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) 13:59:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 13:59:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40000, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:59:00 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x1000000}], 0x3}}}) 13:59:00 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8e01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:59:00 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x100000000000000]}], 0x3}}}) 13:59:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 13:59:00 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x90) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000080)={0x1f, 0x9, 0x401, 0x6, 0x9}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) [ 1437.722819] binder: 32291:32317 ioctl c018620b 0 returned -14 [ 1437.730707] binder_alloc_new_buf_locked: 9 callbacks suppressed [ 1437.730714] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1437.744670] binder_alloc_new_buf_locked: 9 callbacks suppressed [ 1437.744686] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:59:00 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x2000000}], 0x3}}}) 13:59:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 13:59:00 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8f00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:59:00 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x200000000000000]}], 0x3}}}) [ 1437.937239] binder: 32558:32595 ioctl c018620b 0 returned -14 13:59:01 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x4000000}], 0x3}}}) 13:59:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x100, 0x10080) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x1, 0x0, 0x3, 0x2}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) modify_ldt$read(0x0, &(0x7f00000000c0)=""/21, 0x15) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0xd4, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'teql0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x245900000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3885}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffffffffff9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb324}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000800}, 0x41) [ 1438.031750] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1438.039531] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1438.190516] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1438.231228] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:59:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:59:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 13:59:01 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x8f01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:59:01 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x400000000000000]}], 0x3}}}) 13:59:01 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x100000000000000}], 0x3}}}) 13:59:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000480)={{0xcc, 0x0, 0x371, 0x192, 0x24b, 0x6, 0x2e0, 0x2}, "27d523a0546091ac0ebd9fbbdfd1fd929f5e321e6d6574099b7ae9294502528d08edb1dd62dc03a4d37cc3b52b26aee0c3268d331976152c78aad4c7f2c2cf6182c80f0cbaf329c43d276e041b88cdcd26d36014d2277d93cbdabc51330b06e9322403d6e4be8ff9334034d7357a677d7675b718c4630fce068e2dc9b2737098520adee8ec8b1598cd24d5a91763ed923d59059c4c6e0ba8468077344df33ed6663c0e39eecf13aceaf3649563f978ddac04343b228c0bfa9d894d95bcd587ac9c0db34579733d24e1c06a1ea7e26c0bbc13c9eb85d32ef334a20c3be1ace07f98c49767e33e8bf204aaabc66f0c", [[], [], [], [], [], [], [], [], [], []]}, 0xb0e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1438.706747] binder: 32558:32595 ioctl c018620b 0 returned -14 [ 1438.711584] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1438.720385] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:59:01 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x200000000000000}], 0x3}}}) 13:59:01 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9000000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1438.801719] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space 13:59:01 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}], 0x3}}}) 13:59:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) [ 1438.847985] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1438.853123] binder: 32765:32766 ioctl c018620b 0 returned -14 [ 1438.911030] binder: 32765:32766 ioctl c0306201 20000540 returned -11 13:59:02 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9001000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1438.984498] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space 13:59:02 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x400000000000000}], 0x3}}}) [ 1439.029140] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1439.088795] binder: 32765:32766 ioctl c018620b 0 returned -14 13:59:02 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b00)="c2800ad7046a0e94152a709cb77832473fd0bfa518a41e6abc9968281e78d8b4711cd6f4c75aacb24fe23ec666a378a2e59581698b22b17f4bfa32f64af8b0fa4ac3b1da8a2095e4c2120e3592acfd261dff618bdc156e6dd3268a49c71152d227df2b1d80d50cc3ca73135b27e4555f1fa74a3fed987bd7382e248efdd2ffd01e7376b1f2b4bc69a6c53c485cef350a7bd436af063def2e915454ed4b0ba8d73fcf8485d9a753e8d8abc44ad7dd10843c7c91ea451de11ae5cc8f4b0ed8a84158cff7191cf54657cd4fa8756e3bb9301a25af6a5378e0c27f6281bacfb1f6d98a7b11f796f210ce269fe130c391d8db3f42", 0xf2}], 0x1, &(0x7f0000001c40)="48d66e", 0x3, 0x40}, 0x4000000) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x80000) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, &(0x7f0000000600)=[{&(0x7f00000000c0)="80919bcf2bf2a1eb1217fde5ac", 0xd}, {&(0x7f0000000100)="1bbc83787d39cf981ac6d57c842bbc4d08bcae987e95a6bfaca5f62ca59326636f2ef6932e61bd21f2a3a63e6ba939a4ac8479feafd5359e814468936d0c58a09a4831c1332ba9852b6de9a860001f5dda58330885c9034767d3add64eab407e15c097b005d7ecd26c0f61159a38b87fa89d5f00a6f019c0463a8317659aeae88e8481839b694feb410100dcc14807e8a2e926517ebd4aec7236a379826517b3337ec1c1c9931c271cd625fe71ffad8e53bc", 0xb2}, {&(0x7f00000001c0)="b3bba28de38b73519e3813c445f179e326c0aefc5e1d186401a76d3df9dcc80f259627e1", 0x24}, {&(0x7f0000000280)="1e6b77b9b71bbcc70d06a0bf6d363a2ea22a31b01e9cebe9ee48703d42db422f45ef02e23dcf440cf9851cf3b40515ec0e95632e27a8ad87a3", 0x39}, {&(0x7f0000000380)="d03da7d27d082ef58fc8e40a2b54377a17478f4bf294f26825cedf58705fde3e8623313316d662a8a33181e8b65897cd5fce6f43cf46d17ab8f64d097943a5b87605d3312a389ecb19", 0x49}, {&(0x7f0000000480)="a63a5e9de5bff298f14cceb57b6f851b2b3c3f8b455208330b509ed2d77a1c21fad4af1c7311c2d31f5a2bd26b89c577faf304c961019e111ac6b11fe2a594c5aadf8111f907e90be4aecea224cf82335fc5506ca75ca712bbc7bf6063d015acd8a35044019836525fa12e0dd4d01a0755ee7691082e27702cad98", 0x7b}, {&(0x7f0000000580)="247b73ca7cb8da1ee1c3db1a0cce317e524c3ac15f5d07883ca33511230534182c447a9fb62f75d1149fd8d23ce429a6a2b95695f70fd5aa1b092f962c15b74c1a4b059096b86f06b1542e5eec02adf58c61885f0aa179427aacc2173c10c765f4f65628619d", 0x66}], 0x7, &(0x7f0000000680)="67a9e4e23a3f00acda5743aae55db41b765bf9ed363b6ecb4249dbbf7e4b81585ce686a688c8fa35114df90b42dbec972b18af3de37203b47de95e312eeb9073dd44f44a565078cbf730723160dba42fdf77fbc61b9c4bf8a3a4782f374aaafe113a248c7715ad198eae26e8e5a7de37b7242ce363bc80870a4b97bd7c0971414b734667fdc3d1bb9cf164977f84b09ced49", 0x92, 0x10}, 0x4010) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:59:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a6a730000000000000000000000000000000000000000852a627300000000000000000000000073000000000000000000000000000000000000000000000000000000000000005867193d6200883cd1206f457a924088750c119547f7a4fce83b946de776c36f805fa54e8cc0ba5edf91dbb4d37990f6b06e32f89c693ca2d7b889ff6f991d0f96e2fc3aed4c34c4d97abdd6d6a809b0cfed0a5ec56411d7b4f2fe7b601efe4571db96fce6dff1ab90fea8cde8282a92283df876a8d551bd76fa"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x90c, 0x4000) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000080)={0x0, {0x10002000000, 0x5}}) io_setup(0x2, &(0x7f00000001c0)=0x0) io_cancel(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x5, r0, &(0x7f0000000480)="527354ec15cd6e0773998626a539cef446d9fd581976d1f70042d4e78aa442e8b7678476d5cafe863d4b06e4ba75d23a8f8f14e623dc5d2371b321e7b5e1127ade82abd075e35afde0879d88d3a37e8ae455e3c90976ca054235b9827a83e53a845c9fcb044506052997dd5fe6b72940c2c57e4d00de84a31cce1818085cd1119223bd5e35c14808707d3eff60577a14e1fe3dc4fa2238ee99922b575b3e9ebbcaabc5d3e9e9948ca44215e0c4c208ab1ab172c1f8f2f1d2024f52dd7851883473597c020a365448c28398499b186fadbed1645fbca010", 0xd7, 0x1, 0x0, 0x1, r1}, &(0x7f0000000280)) 13:59:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 13:59:02 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}], 0x3}}}) 13:59:02 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9100000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:59:02 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x2}], 0x3}}}) [ 1439.232876] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space 13:59:02 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}], 0x3}}}) [ 1439.306724] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:59:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) [ 1439.353950] binder: BINDER_SET_CONTEXT_MGR already set 13:59:02 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9101000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1439.393705] binder: 432:437 ioctl 40046207 0 returned -16 [ 1439.425387] binder: 432:499 ioctl c018620b 0 returned -14 13:59:02 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x4}], 0x3}}}) 13:59:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x82600) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:59:02 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}], 0x3}}}) [ 1439.522432] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1439.553492] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1439.663969] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1439.672640] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:59:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000ffffffff00000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:59:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 13:59:03 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9200000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:59:03 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x1000000}], 0x3}}}) 13:59:03 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000]}], 0x3}}}) 13:59:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x5, 0x8, 0x3, 0x12, 0x0, 0x70bd2b, 0x5, [@sadb_ident={0x2, 0xb, 0x0, 0x0, 0x9}, @sadb_x_sec_ctx={0xa, 0x18, 0x0, 0x1ff, 0x43, "06e6ae29b2a89926ba94ba839be50b5b5343c54b457d3b20b83b8b3379470f60e8256ff5851caeeee9ea81fac4c9222910f2b267cd8c50ac1833363006572c8ffb96b3"}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d6}, @sadb_ident={0x2, 0xa, 0x9, 0x0, 0x7f}]}, 0x90}}, 0x0) getsockname$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x10) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x38, 0x0, &(0x7f0000000140)=[@acquire={0x40046305, 0x2}, @release={0x40046306, 0x2}, @increfs_done, @acquire_done], 0x0, 0x0, 0x0}) [ 1440.138777] binder: BINDER_SET_CONTEXT_MGR already set [ 1440.138802] binder: 432:499 ioctl c018620b 0 returned -14 [ 1440.144178] binder: 432:437 ioctl 40046207 0 returned -16 [ 1440.155875] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1440.163783] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:59:03 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9201000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:59:03 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x2000000}], 0x3}}}) 13:59:03 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}], 0x3}}}) 13:59:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) [ 1440.290206] binder: 685:707 ioctl c018620b 0 returned -14 13:59:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000040)={0x7}) 13:59:03 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9300000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:59:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ppoll(&(0x7f0000000380)=[{r0, 0x2091}], 0x144, 0x0, 0x0, 0x11bc0fe5b08135c8) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000280)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x10000, 0x40) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000810}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r3, 0x0, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\b\x00'/52, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:59:04 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x4000000}], 0x3}}}) 13:59:04 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}], 0x3}}}) 13:59:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 13:59:04 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9301000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:59:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = dup(r0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x6) [ 1441.087865] binder: 685:707 ioctl c018620b 0 returned -14 [ 1441.151153] binder: 908:910 ioctl 80086601 20000000 returned -22 [ 1441.183171] binder: 908:910 ioctl 4c06 3 returned -22 13:59:04 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x100000000000000}], 0x3}}}) 13:59:04 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x400000000000000]}], 0x3}}}) 13:59:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) [ 1441.215653] audit: type=1400 audit(1560693544.251:111): avc: denied { map } for pid=914 comm="syz-executor.1" path="/dev/dsp" dev="devtmpfs" ino=16941 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sound_device_t:s0 tclass=chr_file permissive=1 [ 1441.218143] binder: 908:910 ioctl c0044306 20000040 returned -22 [ 1441.249023] binder: 914:918 ioctl c018620b 0 returned -14 13:59:04 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9400000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:59:04 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}], 0x3}}}) 13:59:04 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x200000000000000}], 0x3}}}) [ 1441.405492] binder: 908:910 ioctl 80086601 20000000 returned -22 13:59:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x28041, 0xa) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000040)) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000080)="fa89ce72bbbebd2aef00c33909dbb9f481cf4ebe78d0e7da18b9d41d7413654c0e515d47fed682d9a164591d2049f27f3af277f1acf4c6943883a40dc3f5c5ea55debdc2dbfa89e2f8e70218712a803a73f1dc50d3a62476b609d160e8dd7a779c705990330db23d441ea0c4050158b6c46297d2c4fcd910eeec695f4b600e749b896808cf80e4c9b1b0bb06d164e8484259ae1fb073a7880a6afbd47c3ed2c0e8e83aa69ca238578bb95010d9b0013866db6611e5f920e330fb5cb44b8b99a595c7") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:59:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 13:59:05 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9401000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:59:05 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], 0x3}}}) 13:59:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2001, 0x1) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000001780)={0x0, 0xd48}, &(0x7f00000017c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000001800)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0x800, 0x5}, &(0x7f00000018c0)=0x90) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001900)={0x0, 0x4, 0x4, [0x7, 0x9, 0x32, 0x1ff]}, &(0x7f0000001940)=0x10) sendmsg$inet_sctp(r1, &(0x7f0000001a80)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x10001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x30}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88a9da0d23aa32896a4107228a686dc649cbc914a63a6c24c9988284eb39356fb1017831e60a4a4b2992d1c7f4a457e7154f5fdc206db85d32f844b5c873b2c984780a8866c0a01d77c31c2ec012294fc5bee1c9f43a5357492ba5e6fd3a590c80db1dc3403a0e47a0543a4891801f563fee88a6e65bf834c590001d742270bc05", 0x81}, {&(0x7f0000000480)="b21d303d16a0711a2d85adf19fa7be350f0c7ea5b1e53b7497c2119f74434e12673b37e889a1cd04a959a84698aab010d7d57064c68b5fe82b2eaa51a4fff6b621258834d4b8ecf724c8c2d900a684bfc517406c11b26cc04c74788081de5ea4b744810664b46cd002a818aabc5d1795c0e971d94d7931ad91c44d36e01c6f58c58a8a857a87fe7d7069716220c15081964666ed02692c8bc378e65d0d06181ffb0e66c3d600db886a9963e7174a2732c5a08de63035ee250abaf09c6450701718aba031a542592cda386937e63267f372e8ba64e699ec2d21737af6db15", 0xde}, {&(0x7f0000000580)="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", 0xfd}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="12735a6074c4c7a91a8a4fed5cda33a2d25e6436ec7d1ca0e66a8e312b3939dbac34ea8d7eaed09e559f630f275ea4daa0aeb0bef2ba57556a1a54d34a70416d51f01a9c51a3380a2e276f1e4adca81731fbb3099d51fb2f4bc33022465e4c039436575a061b2d91f7027c3408dc813dc3fd4110619038c628a7384d708353999387bd2b2e7515fca5610d368f154c26828debbeb55de1d2417152e584477f51b45327bffe7c0c611c32e23ad57429c8c2b80778f5b488e821c5ab0b3b39025eaa10b4952cc1b3a813ad8098dc1394eb894bf4003bd7797392e08fed77c43ada7eb5082bc0dba25b8fcf20894abaff66e1b6ee76e483", 0xf6}, {&(0x7f0000000180)="ae0317fa9e677cff9e4e79fe3b35fb60df6087c6efe0b94feca6fd860d4fdcee4e", 0x21}, {&(0x7f00000001c0)="359a4e63c6ec70552fe9da78d6dcab7ef8bf4106a94d361c3dff3f9f97fc", 0x1e}, {&(0x7f0000000280)="852ae88c5b218cc1d4f562daaff889d676572276a777c3b47248640bc674d60fc2c230d40d1ba37d60e9a3675d14ae4adedb8148b6816783f8a091dc6c127bcafd116594b74841005530741026bc1c940141c1dce210a7bf8a145d6a15f676", 0x5f}], 0x8, &(0x7f0000001980)=[@authinfo={0x18, 0x84, 0x6, {0x7ff}}, @sndrcv={0x30, 0x84, 0x1, {0xfffffffffffffffb, 0x3f, 0x200, 0x4, 0xfff, 0xfffffffffffffffa, 0x4, 0x4, r2}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x3, 0x8208, 0x54f, 0x6, 0x7, 0x9, 0x0, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x8000, 0x7a58, 0x204, 0x9, 0x9, 0xfffffffffffffff8, 0x0, 0xfffffffffffffff7, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x20}}], 0xc8, 0x4}, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001ac0)={r2, 0x1}, &(0x7f0000001b00)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a6273000000000000b15600"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 13:59:05 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x400000000000000}], 0x3}}}) [ 1442.006649] binder: 914:925 ioctl c018620b 0 returned -14 [ 1442.084579] binder: BINDER_SET_CONTEXT_MGR already set 13:59:05 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}], 0x3}}}) 13:59:05 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9500000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:59:05 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x2]}], 0x3}}}) [ 1442.106804] Bluetooth: hci0: Frame reassembly failed (-84) [ 1442.107175] Bluetooth: hci0: Frame reassembly failed (-84) [ 1442.117612] binder: 1054:1064 ioctl 40046207 0 returned -16 [ 1442.134414] binder: 1061:1068 ioctl c018620b 0 returned -14 13:59:05 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}], 0x3}}}) 13:59:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x80000) 13:59:05 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x4]}], 0x3}}}) 13:59:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x1, 0x3, 0x4}}, 0x14) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1442.928183] binder: 1061:1068 ioctl c018620b 0 returned -14 [ 1442.928579] binder_alloc_new_buf_locked: 10 callbacks suppressed [ 1442.928589] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1442.948363] binder_alloc_new_buf_locked: 10 callbacks suppressed [ 1442.948377] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1443.015788] binder: 1304:1305 ioctl c018620b 0 returned -14 [ 1443.070949] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1443.078712] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1443.815119] binder: 1304:1305 ioctl c018620b 0 returned -14 [ 1443.815661] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1443.829002] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1444.180846] Bluetooth: hci0: command 0x1003 tx timeout [ 1444.186266] Bluetooth: hci0: sending frame failed (-49) [ 1446.260864] Bluetooth: hci0: command 0x1001 tx timeout [ 1446.266314] Bluetooth: hci0: sending frame failed (-49) [ 1448.340885] Bluetooth: hci0: command 0x1009 tx timeout 13:59:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 13:59:15 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9501000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:59:15 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}], 0x3}}}) 13:59:15 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x1000000]}], 0x3}}}) 13:59:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = accept$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e) getsockname$unix(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) 13:59:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000000c0)={0xff, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x4, 'fo\x00', 0x0, 0xa6, 0x41}, 0x2c) creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x1, 0x4800) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000040)={0x6, 0x100, "5efceded0890bdf35c4e6f6120400a75547ab26df51831e50ace8eb9ebb43454", 0x101, 0x5, 0x8, 0x8000000000000, 0x3c}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x72, 0x0, &(0x7f0000000140)="03b4e000000000000000004088e424d391e5d4f4d07a609bfde33e00000000a277b47ca51512f122dc05000000d7abb319def86b03b7b043d039056526aa43a08b567099707bd6f72df7ba0f72a3dd05312a688f57876396c7d82165a4c2"}) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000100)={0x2, 0x40, 0x80000001, 0x7fff, 0x80000001, 0x10001}) [ 1452.800754] IPVS: set_ctl: invalid protocol: 255 172.30.0.2:20001 [ 1452.803327] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1452.827603] binder: 1308:1316 ioctl c018620b 0 returned -14 13:59:15 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}], 0x3}}}) 13:59:15 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x2000000]}], 0x3}}}) [ 1452.853201] Bluetooth: hci0: Frame reassembly failed (-84) [ 1452.854748] Bluetooth: hci0: Frame reassembly failed (-84) [ 1452.871641] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:59:15 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9600000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1452.913162] binder: 1308:1362 ioctl 541c 20000100 returned -22 13:59:16 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}], 0x3}}}) 13:59:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000000)=[@dead_binder_done, @clear_death={0x400c630f, 0x2}, @clear_death={0x400c630f, 0x2}], 0x6, 0x0, &(0x7f0000000040)="cc6100aacb8c"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000300)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 13:59:16 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x4000000]}], 0x3}}}) [ 1453.599607] binder: 1308:1362 ioctl c018620b 0 returned -14 [ 1453.651293] binder: 1308:1316 ioctl 541c 20000100 returned -22 [ 1454.900904] Bluetooth: hci0: command 0x1003 tx timeout [ 1454.906338] Bluetooth: hci0: sending frame failed (-49) [ 1456.980980] Bluetooth: hci0: command 0x1001 tx timeout [ 1456.986528] Bluetooth: hci0: sending frame failed (-49) [ 1459.060961] Bluetooth: hci0: command 0x1009 tx timeout 13:59:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 13:59:26 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x80) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000001800"/24]], 0x0, 0x0, 0x0}) 13:59:26 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x100000000000000]}], 0x3}}}) 13:59:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f00000007c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000800)={@rand_addr="3165d93d1c948b35b4c2cd30b7647c19", 0x29, r2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000180000000000000008000000000000006a33b6978c049d16a35403b83b909ba0790334d628c693abccb232ed683f1b6d21b0c96176c04e7c1ba4aec4e0d38cbb7fa8c6d8e8e7ba7048051c3f0568c72ea347d73c8cf5f6f1f0df4bb1eedd404aaa56958df6d15ab7e34d2f8c8d43c82c08e7fd4a35555b0aef8e4af3dff850cfb8949540df75d4e65059e308b9d487dc126500781913613aec3118da58b4f255504dc4a2c4ac347fe0ea0111b13eb213472b639379cbd06846bc458f16aa9fb1ee", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 13:59:26 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9601000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:59:26 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}], 0x3}}}) 13:59:26 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x2}], 0x3}}}) 13:59:26 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x200000000000000]}], 0x3}}}) [ 1463.007204] binder: 1567:1571 ioctl c018620b 0 returned -14 [ 1463.023925] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space 13:59:26 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9700000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1463.063904] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1463.096982] Bluetooth: hci0: Frame reassembly failed (-84) [ 1463.100639] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space 13:59:26 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x400000000000000]}], 0x3}}}) 13:59:26 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x4}], 0x3}}}) [ 1463.103150] Bluetooth: hci0: Frame reassembly failed (-84) [ 1463.111978] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:59:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x82800) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000040)={0x7f, "db572cbce1dbfd547ec8c1e0812d1cbd930f1c76717a5d298c674cdbe4c21659", 0x7, 0x620, 0x561, 0xc54a, 0x2, 0x0, 0x5, 0x100000}) [ 1463.244960] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1463.253321] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1463.264940] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1463.273461] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1463.806639] binder: 1567:1571 ioctl c018620b 0 returned -14 [ 1463.806902] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1463.820462] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1465.140882] Bluetooth: hci0: command 0x1003 tx timeout [ 1465.146626] Bluetooth: hci0: sending frame failed (-49) [ 1467.220987] Bluetooth: hci0: command 0x1001 tx timeout [ 1467.226487] Bluetooth: hci0: sending frame failed (-49) [ 1469.300957] Bluetooth: hci0: command 0x1009 tx timeout 13:59:36 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9701000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:59:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000040)) 13:59:36 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x1000000}], 0x3}}}) 13:59:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x222, 0x0, &(0x7f0000000000), 0xa4747a47, 0x0, 0x0}) 13:59:36 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x2]}], 0x3}}}) 13:59:36 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), 0x4) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) 13:59:36 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x4]}], 0x3}}}) 13:59:36 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9800000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:59:36 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x2000000}], 0x3}}}) [ 1473.243346] binder: 1806:1810 unknown command 0 [ 1473.250411] binder: 1806:1810 ioctl c0306201 20000440 returned -22 [ 1473.271791] binder: 1809:1818 ioctl c018620b 0 returned -14 13:59:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000040)={0xfff, 0x3ff}) 13:59:36 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x4000000}], 0x3}}}) 13:59:36 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x1000000]}], 0x3}}}) 13:59:36 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9801000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1473.377383] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space 13:59:36 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x100000000000000}], 0x3}}}) [ 1473.429914] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1474.072006] binder: 1809:1818 ioctl c018620b 0 returned -14 [ 1475.380943] Bluetooth: hci0: command 0x1003 tx timeout [ 1475.386483] Bluetooth: hci0: sending frame failed (-49) [ 1477.460889] Bluetooth: hci0: command 0x1001 tx timeout [ 1477.466332] Bluetooth: hci0: sending frame failed (-49) [ 1479.540878] Bluetooth: hci0: command 0x1009 tx timeout 13:59:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000040)) 13:59:46 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x2000000]}], 0x3}}}) 13:59:46 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9900000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:59:46 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x200000000000000}], 0x3}}}) 13:59:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = dup3(r0, r0, 0x80000) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e20, 0x1fd1, @local, 0x9}, {0xa, 0x4e21, 0xba, @remote, 0x8001}, 0x100, [0x40, 0x531, 0x7, 0x6, 0x0, 0x3, 0x7, 0x8001]}, 0x5c) 13:59:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '/dev/binder#\x00'}], 0xa, "c50b4d8802a99dbd96bdfd81fa2023edc8420c9cbe72be87cae51f18f0eb5a24aa0e2a3197b1b696ce4251d34f54da8d2dfcabb8febbbc3e09795e52cf38b2993e1013d5a9cea16963a790735e46a5e4019c2c88fd43941d3c293a72a28373b9922f489eadf7885fd82e90e54b6f"}, 0x87) 13:59:46 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x400000000000000}], 0x3}}}) [ 1483.494626] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1483.503544] binder: 1955:1963 ioctl c018620b 0 returned -14 13:59:46 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9901000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:59:46 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x4000000]}], 0x3}}}) [ 1483.593767] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:59:46 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x2}], 0x3}}}) [ 1483.667318] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1483.677126] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 13:59:46 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x100000000000000]}], 0x3}}}) 13:59:46 executing program 3: syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x5, 0x400) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) ppoll(&(0x7f0000000000)=[{r0, 0x100}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={0xffffffff}, 0x8) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000100)=""/17) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xfed4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e632623ac46658bbb871c234d17b80c3b567c6ac31b4afb13210106000000003cf0f6790000000000000000"], 0xfffffffffffffe4c, 0x0, 0x0}) [ 1484.293394] binder: 1955:1963 ioctl c018620b 0 returned -14 [ 1484.299744] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1484.307590] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1485.621250] Bluetooth: hci0: command 0x1003 tx timeout [ 1485.626686] Bluetooth: hci0: sending frame failed (-49) [ 1487.701138] Bluetooth: hci0: command 0x1001 tx timeout [ 1487.706587] Bluetooth: hci0: sending frame failed (-49) [ 1489.780909] Bluetooth: hci0: command 0x1009 tx timeout 13:59:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000040)) 13:59:56 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9a00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:59:56 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x4}], 0x3}}}) 13:59:56 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x200000000000000]}], 0x3}}}) 13:59:56 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x8, 0x4, [], &(0x7f0000000040)=0x7}) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f00000000c0)) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) 13:59:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340000000000000000e046a647ae3723300000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) socket$nl_crypto(0x10, 0x3, 0x15) 13:59:56 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x400000000000000]}], 0x3}}}) [ 1493.761626] binder: 2203:2206 ioctl c018620b 0 returned -14 13:59:56 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9a01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 13:59:56 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x1000000}], 0x3}}}) [ 1493.846863] binder: 2203:2310 unknown command 4219648 13:59:56 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x2]}], 0x3}}}) [ 1493.902743] binder: 2203:2310 ioctl c0306201 20000440 returned -22 13:59:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13:59:57 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x2000000}], 0x3}}}) [ 1494.550244] binder: 2203:2206 ioctl c018620b 0 returned -14 [ 1494.550294] binder: 2203:2310 unknown command 4219648 [ 1494.561423] binder: 2203:2310 ioctl c0306201 20000440 returned -22 [ 1495.940924] Bluetooth: hci0: command 0x1003 tx timeout [ 1495.946484] Bluetooth: hci0: sending frame failed (-49) [ 1498.020939] Bluetooth: hci0: command 0x1001 tx timeout [ 1498.026660] Bluetooth: hci0: sending frame failed (-49) [ 1500.100918] Bluetooth: hci0: command 0x1009 tx timeout 14:00:06 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000480)={"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"}) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000040)) 14:00:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:00:06 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9b00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 14:00:06 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x4]}], 0x3}}}) 14:00:06 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x4000000}], 0x3}}}) 14:00:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x8, @ipv4={[], [], @broadcast}, 0x8}, @in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x1a}, 0x9}], 0x38) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x181080, 0x0) recvfrom$x25(r1, &(0x7f0000000080)=""/142, 0x8e, 0x20, &(0x7f0000000140)={0x9, @remote={[], 0x0}}, 0x12) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000008000000000000000000010000000000000000"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 14:00:07 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x1000000]}], 0x3}}}) [ 1503.968786] binder: 2351:2357 ioctl c018620b 0 returned -14 [ 1503.979489] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space 14:00:07 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9b01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 14:00:07 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x100000000000000}], 0x3}}}) [ 1504.012367] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 14:00:07 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x2000000]}], 0x3}}}) 14:00:07 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x4000000]}], 0x3}}}) [ 1504.056628] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1504.074398] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 14:00:07 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x200000000000000}], 0x3}}}) 14:00:07 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9c00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1504.763467] binder: 2351:2368 ioctl c018620b 0 returned -14 [ 1504.769519] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1504.778098] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1506.100879] Bluetooth: hci0: command 0x1003 tx timeout [ 1506.106439] Bluetooth: hci0: sending frame failed (-49) [ 1508.180946] Bluetooth: hci0: command 0x1001 tx timeout [ 1508.186661] Bluetooth: hci0: sending frame failed (-49) [ 1510.260959] Bluetooth: hci0: command 0x1009 tx timeout 14:00:17 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x400000000000000}], 0x3}}}) 14:00:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:00:17 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x100000000000000]}], 0x3}}}) 14:00:17 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9c01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 14:00:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x8000001) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000480000000000000018000000000000002db017d5ab11d9bff5e234d613078eab73e6ccc898f421f1f588002253f1d3f528f09e0a5447ff7db10153b98c3a97a91a902e3e34ec4cf13f1112bd8308a9f8e68b95f5ec3547eb74f8c4c1e24cf7977bcb2ac4594623cc3bf1ddafc72bb3dc00"/164, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="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"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) sync_file_range(r0, 0x80000000, 0x9, 0x1) 14:00:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000001800000000000000080000000000000024d51b95523e04ef4cdaf72e1488692cb06e7d9022787d2ac1f90cd582b354a1dbb1c4ef91", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 14:00:17 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x200000000000000]}], 0x3}}}) 14:00:17 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x2]}], 0x3}}}) [ 1514.216858] binder: 2506:2513 ioctl c018620b 0 returned -14 14:00:17 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9d00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 14:00:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000180000003f3c1bfd8914ee0cf429000000003000000000000000"]], 0x0, 0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x8000, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x5, {0x9, 0x1, 0x10001, 0x5446, 0x9, 0x9}, 0x20, 0x800}, 0xe) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r1, 0x12, 0x1}, 0x14) 14:00:17 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x4]}], 0x3}}}) 14:00:17 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x400000000000000]}], 0x3}}}) [ 1514.298750] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1514.312214] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1514.366513] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1514.381258] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 14:00:17 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x1000000]}], 0x3}}}) 14:00:17 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x2]}], 0x3}}}) [ 1515.010941] binder: 2506:2513 ioctl c018620b 0 returned -14 [ 1516.340868] Bluetooth: hci0: command 0x1003 tx timeout [ 1516.346652] Bluetooth: hci0: sending frame failed (-49) [ 1518.420994] Bluetooth: hci0: command 0x1001 tx timeout [ 1518.426458] Bluetooth: hci0: sending frame failed (-49) [ 1520.500944] Bluetooth: hci0: command 0x1009 tx timeout 14:00:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:00:27 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9d01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 14:00:27 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x2000000]}], 0x3}}}) 14:00:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) read$alg(r1, &(0x7f0000000040)=""/27, 0x1b) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 14:00:27 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}], 0x3}}}) 14:00:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x129000) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000080)=[0x0, 0x4], 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40, 0x0) 14:00:27 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x4000000]}], 0x3}}}) 14:00:27 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000]}], 0x3}}}) 14:00:27 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9e00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1524.461061] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1524.468868] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1524.482473] binder: 2755:2764 ioctl c018620b 0 returned -14 14:00:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x800) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1f, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x18, 0x0, &(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYBLOB="2ec467d64737a39df4d1cc4741f88837e59fdc96a398317ed521b42ddefa64394f4d999009b5b78300d863be", @ANYRESHEX=0x0, @ANYRES64=r0, @ANYRESDEC=r1], @ANYBLOB="3478acd5119ca3017cd9a13e18c1a925555c9d3d50803a20786bab187cd797dce04a4e0f304b0386fc87194a09603227e97f5a65662ee6b7b086f5a1470f24eaf7d7623502000000000000006d95472b93f3974d6e743c706dbf91120641abb3525fc43fa8bb481bc2a8afca74", @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="fb273483c102084f13b4fc8afd809f540578883990d9194c0be84f4730aa9f76fdc8f712b9e6d0758a749bcabc857a2da6b4ef5e0493817ef6e1c459dd202ac10809cb8a176cdb694a6a6e9b20d8b63b3bb0b6b63cada82c114a98c09c7c9bc3d7def704866c862183df3c8fe6a990e0dd86672c988566c5c195adf1a0ddb130"], @ANYRESOCT=r0, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRES32=r1, @ANYPTR64]], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 1524.546175] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1524.560897] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 14:00:27 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9e01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 14:00:27 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x2000000]}], 0x3}}}) [ 1524.640604] binder: 2906:2907 unknown command 536871616 [ 1524.655287] binder: 2906:2907 ioctl c0306201 20000440 returned -22 [ 1525.262717] binder: 2755:2764 ioctl c018620b 0 returned -14 [ 1525.263905] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1525.276626] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1526.581024] Bluetooth: hci0: command 0x1003 tx timeout [ 1526.586567] Bluetooth: hci0: sending frame failed (-49) [ 1528.661149] Bluetooth: hci0: command 0x1001 tx timeout [ 1528.666580] Bluetooth: hci0: sending frame failed (-49) [ 1530.740924] Bluetooth: hci0: command 0x1009 tx timeout 14:00:37 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9f00000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 14:00:37 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x100000000000000]}], 0x3}}}) 14:00:37 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x4000000]}], 0x3}}}) 14:00:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 14:00:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r2, r3) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x0, 0x0) shutdown(r4, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000018000000000000000800"/52, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000000000079eb73b8008983a6e1d292ddd8"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 14:00:37 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x81141046, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x800000000013) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x9) 14:00:37 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x100000000000000]}], 0x3}}}) 14:00:37 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x9f01000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1534.694587] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1534.702088] binder: 3054:3062 ioctl c018620b 0 returned -14 [ 1534.727189] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 14:00:37 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x200000000000000]}], 0x3}}}) 14:00:37 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x200000000000000]}], 0x3}}}) [ 1534.756040] binder: 3059:3060 ioctl 6611 0 returned -22 [ 1534.762980] binder_alloc: 13562: binder_alloc_buf size 8 failed, no address space [ 1534.770717] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 14:00:37 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x400000000000000]}], 0x3}}}) 14:00:37 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x400000000000000]}], 0x3}}}) 14:00:37 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xa000000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 14:00:38 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x0, 0x2]}], 0x3}}}) 14:00:38 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}], 0x3}}}) [ 1534.959809] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1534.975813] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 14:00:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1535.084295] audit: type=1800 audit(1560693638.121:112): pid=3204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16773 res=0 14:00:38 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xa001000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 14:00:38 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}], 0x3}}}) 14:00:38 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x0, 0x4]}], 0x3}}}) 14:00:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRESOCT], 0x0, 0xfffffffffffffdf5}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:00:38 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x22000, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000080), 0x4) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000040)={0xfffffffffffffffa}) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000e71efaa6337ac144852a62730000000000000000000000000000000000000000852a627300000000001600"/68], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 14:00:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000000090000000000000000000000000000000000d602000000000000000018000000000000000800000000000000c8d8d6c24e1dde36078586d750c5a0b6fb9727f07ae127cc5b21f101f544a061616d196441467cff078ae44bd73e434f676314f1a302328fba20621886e1fd6dcf0dbe0cbbb25495eb58be4087b0ec3e0568b69feb7e287774b3a676ba847f1a651128dfbb3b48f33d221eac01b1583e603571682be24fc7677241efa067163311dbf63832c7a69bf62501e7855ca023659dd3350d9d3f9754a7dec284dd16969fbf50faa20ba068a36fe2e9b0f8435331", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 1535.501787] binder: 3054:3062 ioctl c018620b 0 returned -14 [ 1535.503759] binder_alloc: 13562: binder_alloc_buf size 8 failed, no address space [ 1535.515928] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 14:00:38 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}], 0x3}}}) 14:00:38 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x0, 0x1000000]}], 0x3}}}) 14:00:38 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xa100000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1535.573103] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1535.599753] binder: 3222:3224 ioctl c018620b 0 returned -14 [ 1535.605743] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 14:00:38 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}], 0x3}}}) 14:00:38 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x0, 0x2000000]}], 0x3}}}) [ 1535.665120] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1535.687226] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 14:00:38 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xa101000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 14:00:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x101080, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000140)={0x5, 0x7, 0x2, 'queue1\x00', 0x81}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffffffffffff9304, 0x40000) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000080)={0x6, 0x9, 0x4, 0x0, {0x0, 0x7530}, {0x2, 0x1, 0x2, 0xfffffffffffffff7, 0x1000, 0x992, "9c7cfd3c"}, 0x9, 0x0, @planes=&(0x7f0000000040)={0x429, 0x0, @mem_offset=0x401, 0x7ff}, 0x4}) 14:00:38 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x0, 0x4000000]}], 0x3}}}) 14:00:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x400002100001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = dup2(r1, r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r1) tkill(r2, 0x1000000000016) openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) ioctl$KDENABIO(r0, 0x4b36) 14:00:38 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000]}], 0x3}}}) [ 1535.817544] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1535.852624] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 14:00:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101400, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x80, 0xd5}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r2, 0x80000001}, 0x8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00644040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000b89ebff373025c32795fd83559c1d2c7ecd5e6a0580eed048498eb8744ca0d27d92ea35dcc802769274b497275338b5360757ce2d18431d76ae00338ac5dc99d25a6a69fab4b06cb851e7af0bba6ee750219bd1feca3a01f5a61647f1e380e11780fc51418d5de00ca5691ca4cd61ad2596a0074b9b26a5c7c", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 14:00:39 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xa200000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 14:00:39 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x0, 0x100000000000000]}], 0x3}}}) 14:00:39 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}], 0x3}}}) 14:00:39 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x200000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x4, 0x40, 0xfff, 'queue1\x00', 0x8}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000140)=0xe8) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000180)={0x3, @null, r1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 14:00:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005500)=@polexpire={0xc0, 0x1b, 0x221, 0x0, 0x0, {{{@in6=@mcast1, @in=@multicast2}, {}, {}, 0x0, 0x6e6bb0}}}, 0xc0}, 0x8}, 0x0) [ 1536.398005] binder: 3222:3224 ioctl c018620b 0 returned -14 [ 1536.398894] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1536.411703] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 14:00:39 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}], 0x3}}}) 14:00:39 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x0, 0x200000000000000]}], 0x3}}}) 14:00:39 executing program 5: write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socket$alg(0x26, 0x5, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000004000/0x1000)=nil}) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x8000040000408, 0x0, 0x0, 0x1, 0x4c9]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1536.507649] binder: 3509:3516 ioctl c018620b 0 returned -14 14:00:39 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xa201000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1536.572508] binder: 3509:3516 unknown command 1077961728 14:00:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="86430c0d8bcd6f81bfa3bb0480b111cd7376da2d59ebba4c661ac7dde48b167e26b9742ec0715e88e014870715c419496d392c5f8ea342e5f2684197aac32e464c81db603f59c8b1b8485a73167afb75738561ffa53207547476ebc42de7187467fae6ccd44076464f64f9c49365c14630cc0f83b9e21dbcb2356c40", 0x7c}, {&(0x7f0000000080)="954350e12e2e4879c54ac8b5ecdd0419e9ee924f4e6711ea8bb355fecb2892514da3dfaf5b07c3a32923c985ade093c964d64d56f92cff5f99e4f54c6595", 0x3e}, {&(0x7f00000000c0)="88aaa4a693f20f393e166a292ef0acaca848777f291bf159a5ce91f5fef385c1d06c45498377275b95546493924a7234a93c8fe777b8ab595ead010acdf8294d7ad119a57e5012648c79db4c700a7ab665119d63ebc385a6a9b423f3d92de1bac4ea03d14b7fab4de55e42e2b35351c8172ed9d73da7e081a0cf55b5244867edf9a1607653286cbf5cd26ef5a54ff89ba0347d3c3979edd97a257b9d11a67d04900fcc457846e5cfbc8c1bce1f63f30f40e6f1e23da3f7678626368a52bf8811a25e951fd09951e26ed53a306c402c983c20ce38ef90ee0d2233e1af48fe7226c2b4a7a83c6f7978282f523b4527", 0xee}, {&(0x7f00000001c0)="5dfa0901d88992871ca165f4f91ee284fb02a59669bbb340cb9206796908d0042cc18144eff26d808ed3968cdda48d444173dbc288bcfbbfb05aa7ab", 0x3c}, {&(0x7f0000000280)}, {&(0x7f0000000480)="9d658c1712a3b34e4dcc1643392276d009e04bdb0cf8d2a1f2e38a9a0be96a5064cb58d86a2918615e9e4932ca220409abe474cbab114a55793c4a7d14e09402d0e02a3d47c0c8a5792dd5c69e77374f4444acbf778d3618fa496f63c27030ca290857e82033ab14aa7c30cb7edfac41090aa9fbad7d3629fb4e2374f17a6a3d253132934be98469ff5a35e21ac8b515b2539b2bd87c0e2e4b4f6b08f64acebe23c3137f434baf6ce5f49b86781a17800d92b742a6567da7f82a4373e6ac23b34dda43c4edef13f480235e9c647e2229cf4a771ed8f780e135cbb63f4faf947fbb88b4266ee8ac0c0de1b8fe4c", 0xed}], 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1536.624625] binder: 3509:3516 ioctl c0306201 20000440 returned -22 [ 1536.704285] binder: 3509:3612 ioctl c018620b 0 returned -14 [ 1536.711959] binder_alloc: 13562: binder_alloc_buf size 96 failed, no address space [ 1536.726480] binder: 3509:3564 unknown command 1077961728 [ 1536.745587] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 14:00:39 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x0, 0x400000000000000]}], 0x3}}}) [ 1536.755381] binder: 3509:3564 ioctl c0306201 20000440 returned -22 14:00:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000100)={r1, r0, 0x6}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 14:00:39 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xa300000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 14:00:39 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x400000000000000]}], 0x3}}}) [ 1536.854391] kvm_hv_set_msr: 29 callbacks suppressed [ 1536.854437] kvm [3595]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000003b data 0x4d00000000f [ 1536.889999] kvm [3595]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000077 data 0x4d00000000f [ 1536.921899] kvm [3595]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000013 data 0x4d00000000f [ 1536.959382] binder: 3725:3727 ioctl c018620b 0 returned -14 14:00:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x20000, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 14:00:40 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x0, 0x0, 0x2]}], 0x3}}}) 14:00:40 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}], 0x3}}}) [ 1536.970323] kvm [3595]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000004d data 0x4d00000000f [ 1537.031462] kvm [3595]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000087 data 0x4d00000000f [ 1537.041692] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1537.049712] kvm [3595]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000025 data 0x4d00000000f 14:00:40 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xa301000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1537.076840] kvm [3595]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000005f data 0x4d00000000f [ 1537.088669] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) [ 1537.097512] kvm [3595]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000035 data 0x4d00000000f 14:00:40 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x0, 0x0, 0x4]}], 0x3}}}) [ 1537.133123] kvm [3595]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000006f data 0x4d00000000f [ 1537.169205] binder: 3725:3727 ioctl c018620b 0 returned -14 [ 1537.178092] kvm [3595]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000000d data 0x4d00000000f 14:00:40 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) read$FUSE(r0, &(0x7f0000002ac0), 0x1000) 14:00:40 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], 0x3}}}) 14:00:40 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xa400000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 14:00:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x2ba, 0x0, 0x0, 0x2d7, 0x0, &(0x7f0000000000)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x3}], 0xee, 0x0, &(0x7f0000000040)="404b69c49b7a5349e95ef60c124154058508d7d1c9434cdfd27e56b1e108b760b98907ccec871b8f291eaf9deee136a66a90ce4db409acc181356c40ead1280f710cb7a01040472e7a873ac19ca82a16ccf3eede928776a464cc1816e3f4d10c60edf7ebb74ed9db0c3dcbdaa7a4e039b544beef0aa8a0ff40f540a13a22bc57870eed377b3f72ce42bb36b271e761f1270d5ecfa8decccf033594c772f2dcd49afe9ed226b506e1f671b4ae52be943669d6176700b2384056717bf25968928ae8c4fa65e5b559c67e385ca252d5878370bbb96f64772b09d32f68ac2b8585ac77a848f5d8a8927f074bcfbf9d76"}) 14:00:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) flock(r0, 0x8) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x4000) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 14:00:40 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x0, 0x0, 0x1000000]}], 0x3}}}) 14:00:40 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}], 0x3}}}) [ 1537.445397] binder: 3855:3859 ioctl c018620b 0 returned -14 [ 1537.469994] binder: 3855:3859 ioctl c0306201 20000540 returned -14 14:00:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRESOCT], 0x0, 0xfffffffffffffdf5}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:00:40 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x0, 0x0, 0x2000000]}], 0x3}}}) 14:00:40 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xa401000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 14:00:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xa, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x280041, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000180)={r2, 0x1, 0x6, @dev={[], 0x20}}, 0x10) 14:00:40 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}], 0x3}}}) 14:00:40 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x0, 0x0, 0x4000000]}], 0x3}}}) 14:00:40 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}], 0x3}}}) 14:00:40 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xa500000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 14:00:41 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}], 0x3}}}) 14:00:41 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x0, 0x0, 0x100000000000000]}], 0x3}}}) 14:00:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a6273000000000000000000000000000000000000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000022930de38db7e3c88a5dc8078a92c661d53acfef948a28c5259341dcca7d1c35394b6590297ab45114c2fd3db16baa41234ec3626ac9854ba878091bccbd11ab99fa74703f578692b93bf13817a0ae213e4166edd4a7005677241dea4ff2d0b33"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0xc0200, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000180)=""/18) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000380)=""/187) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc) 14:00:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000000)="666a28be5b33aa3203e430ef1019753ce986408e69576751cd5be41feb54c54b1ff94d3122", 0x25, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) prctl$PR_GET_SECCOMP(0x15) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x7, 0x0, 0x2}) 14:00:41 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xa501000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 14:00:41 executing program 5: writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001000090468fe07002b00000001000a0014000000450001070300001419001a00120002", 0x27}], 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x103}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) [ 1538.232305] binder: 3855:3859 ioctl c018620b 0 returned -14 [ 1538.233627] binder: 3855:4103 ioctl c0306201 20000540 returned -14 14:00:41 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}], 0x3}}}) 14:00:41 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x0, 0x0, 0x200000000000000]}], 0x3}}}) 14:00:41 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xa, 0x0) readv(r1, &(0x7f00000017c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 14:00:41 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xa600000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1538.373748] binder: 4154:4160 ioctl c018620b 0 returned -14 14:00:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x6, 0x111000) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000100)) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x100000001, &(0x7f0000000040)=""/77) 14:00:41 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x0, 0x0, 0x400000000000000]}], 0x3}}}) 14:00:41 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}], 0x3}}}) 14:00:41 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xa601000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 14:00:41 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x2]}], 0x3}}}) 14:00:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000007ffffffffe000"/52, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) io_setup(0x8, &(0x7f0000000000)=0x0) io_pgetevents(r1, 0x2, 0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f0000000100)={0x77359400}, 0x0) 14:00:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x4}, 0x4) 14:00:42 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x2}], 0x3}}}) 14:00:42 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xa700000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 14:00:42 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}], 0x3}}}) [ 1539.149574] binder: 4154:4219 ioctl c018620b 0 returned -14 [ 1539.245008] binder: 4376:4405 ioctl c018620b 0 returned -14 14:00:42 executing program 5: syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2000000000000000, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x100082) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000180)='\\et\x8a\x88\x04~h\x98\"ime_type$%\x00\xc14\xa7\x9a\xb2\x95\xfe\x81\xb2\xf4)k}\x94\x84\x87\xd7\x12\x1f\xbdzrPP\x14\xbc\xe5t1O\x03\xe2\xbc\xfe\x90>!\xdf@x\x98b\xf7\xfa\x87\xd0\xc9\xf3\x15,\xa7\xdc~\x98\xb5\x9d\xf5\xe2\xc1\xfcC', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) sendfile(r0, r1, 0x0, 0x20000102000007) 14:00:42 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000]}], 0x3}}}) 14:00:42 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x4}], 0x3}}}) 14:00:42 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xa701000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 14:00:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x224001, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000040)=0x6) 14:00:42 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x1000000}], 0x3}}}) 14:00:42 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xa800000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1540.038418] binder: 4376:4405 ioctl c018620b 0 returned -14 [ 1540.040324] binder_alloc_new_buf_locked: 13 callbacks suppressed [ 1540.040335] binder_alloc: 13562: binder_alloc_buf size 14745600 failed, no address space [ 1540.059889] binder_alloc_new_buf_locked: 13 callbacks suppressed [ 1540.059903] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 14:00:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$getflags(r0, 0x40b) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x3, 0x8000000000000000, 0x2a, 0x1}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0x7fffffff, 0x2}, &(0x7f0000000100)=0x8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 14:00:43 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x2000000]}], 0x3}}}) 14:00:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x846e8cd22f259ecd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063ff0700000000000000000000000000000000000000000000000000000000000000001398c26e329e9a100f5415505e480000479aff33e8317cfaebc292bd38b35b0c684f28939545a6ba8c32dcd199a12b6b9e156062ac68da1587857e472005c3743486f8cfad6162f3d0f2224b9d", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000001500"]], 0xbb, 0x0, 0x0}) 14:00:43 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x2000000}], 0x3}}}) 14:00:43 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xa801000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) 14:00:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@delpolicy={0x6c, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@dev}}, [@encap={0x1c, 0x8, {0x0, 0x0, 0x0, @in=@loopback}}]}, 0x6c}, 0x8}, 0x0) 14:00:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="10520018ed4631fec77a89e000000000000000"]], 0x0, 0x0, 0x0}) fcntl$notify(r1, 0x402, 0x5) 14:00:43 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x4000000]}], 0x3}}}) 14:00:43 executing program 5 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 14:00:43 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x4000000}], 0x3}}}) 14:00:43 executing program 4: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="e1dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0xa900000000000000, &(0x7f0000000080)=[@enter_looper={0x40406300}], 0x1, 0x8000a0, &(0x7f00000000c0)="c9"}) [ 1540.272323] binder: 4611:4613 ioctl c018620b 0 returned -14 [ 1540.343230] binder: 4615:4616 unknown command -117440640 [ 1540.356836] binder: 4615:4616 ioctl c0306201 20000440 returned -22 [ 1540.364352] binder_alloc: 13562: binder_alloc_buf size 32 failed, no address space [ 1540.407047] binder_alloc: allocated: 12288 (num: 353 largest: 96), free: 0 (num: 0 largest: 0) 14:00:43 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x7f, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x100000000000000]}], 0x3}}}) [ 1540.529186] FAULT_INJECTION: forcing a failure. [ 1540.529186] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.580714] CPU: 1 PID: 4667 Comm: syz-executor.5 Not tainted 4.19.51 #23 [ 1540.587708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1540.597083] Call Trace: [ 1540.599697] dump_stack+0x172/0x1f0 [ 1540.603452] should_fail.cold+0xa/0x1b [ 1540.607373] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1540.612496] ? __lock_acquire+0x6eb/0x48f0 [ 1540.616760] ? __lock_acquire+0x6eb/0x48f0 [ 1540.621014] ? avc_has_extended_perms+0x10f0/0x10f0 [ 1540.626057] __should_failslab+0x121/0x190 [ 1540.630316] should_failslab+0x9/0x14 [ 1540.634132] kmem_cache_alloc_node+0x56/0x710 [ 1540.638652] ? mark_held_locks+0x100/0x100 [ 1540.643016] __alloc_skb+0xd5/0x5f0 [ 1540.646841] ? skb_scrub_packet+0x490/0x490 [ 1540.651177] ? __lock_is_held+0xb6/0x140 [ 1540.651194] ? ldsem_wake+0x40/0x40 [ 1540.651222] bcsp_recv+0x8c7/0x13a0 [ 1540.651249] hci_uart_tty_receive+0x225/0x530 [ 1540.651266] ? hci_uart_write_work+0x710/0x710 [ 1540.651283] tty_ioctl+0xe91/0x1510 [ 1540.658979] ? tty_vhangup+0x30/0x30 [ 1540.658995] ? mark_held_locks+0x100/0x100 [ 1540.659015] ? proc_cwd_link+0x110/0x1d0 [ 1540.687371] ? __fget+0x340/0x540 [ 1540.690849] ? ___might_sleep+0x163/0x280 [ 1540.695017] ? __might_sleep+0x95/0x190 [ 1540.699008] ? tty_vhangup+0x30/0x30 [ 1540.702778] do_vfs_ioctl+0xd5f/0x1380 [ 1540.706689] ? selinux_file_ioctl+0x46f/0x5e0 [ 1540.711214] ? selinux_file_ioctl+0x125/0x5e0 [ 1540.715727] ? ioctl_preallocate+0x210/0x210 [ 1540.720142] ? selinux_file_mprotect+0x620/0x620 [ 1540.724906] ? iterate_fd+0x360/0x360 [ 1540.728845] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1540.734388] ? fput+0x128/0x1a0 [ 1540.737676] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1540.743208] ? security_file_ioctl+0x8d/0xc0 [ 1540.747696] ksys_ioctl+0xab/0xd0 [ 1540.751192] __x64_sys_ioctl+0x73/0xb0 [ 1540.755095] do_syscall_64+0xfd/0x620 [ 1540.758907] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1540.764085] RIP: 0033:0x4592c9 [ 1540.767269] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1540.781693] kasan: CONFIG_KASAN_INLINE enabled [ 1540.786185] RSP: 002b:00007f923de4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1540.786203] RAX: ffffffffffffffda RBX: 00007f923de4dc90 RCX: 00000000004592c9 [ 1540.786211] RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000003 [ 1540.786220] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1540.786229] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f923de4e6d4 [ 1540.786244] R13: 00000000004c3ace R14: 00000000004d7610 R15: 0000000000000004 [ 1540.794544] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1540.802776] Bluetooth: Can't allocate mem for new packet [ 1540.818038] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 1540.855406] CPU: 0 PID: 9800 Comm: kworker/u4:2 Not tainted 4.19.51 #23 [ 1540.862175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1540.871530] Workqueue: events_unbound flush_to_ldisc [ 1540.876626] RIP: 0010:skb_put+0x35/0x1e0 [ 1540.880672] Code: 89 f5 41 54 49 89 fc 53 4d 8d b4 24 c8 00 00 00 48 83 ec 08 e8 ec e1 0a fc 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 58 [ 1540.899569] RSP: 0018:ffff8880572ffb28 EFLAGS: 00010202 [ 1540.905364] RAX: dffffc0000000000 RBX: ffff88808b9c6ac0 RCX: ffffffff84e1e854 [ 1540.913495] RDX: 0000000000000019 RSI: ffffffff85602504 RDI: 0000000000000000 [ 1540.920762] RBP: ffff8880572ffb58 R08: ffff888073924380 R09: ffffed1015d04733 [ 1540.928138] R10: ffffed1015d04732 R11: ffff8880ae823993 R12: 0000000000000000 [ 1540.935405] R13: 0000000000000001 R14: 00000000000000c8 R15: 0000000000000000 [ 1540.942686] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 1540.950898] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1540.956793] CR2: 00000000008dd308 CR3: 0000000091666000 CR4: 00000000001406f0 [ 1540.964053] Call Trace: [ 1540.966828] bcsp_recv+0x9ae/0x13a0 [ 1540.970478] hci_uart_tty_receive+0x225/0x530 [ 1540.974976] ? hci_uart_write_work+0x710/0x710 [ 1540.979552] tty_ldisc_receive_buf+0x15f/0x1c0 [ 1540.984139] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1540.989687] tty_port_default_receive_buf+0x7d/0xb0 [ 1540.994705] flush_to_ldisc+0x222/0x390 [ 1540.998676] process_one_work+0x989/0x1750 [ 1541.002901] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1541.007582] ? lock_acquire+0x16f/0x3f0 [ 1541.011575] ? kasan_check_write+0x14/0x20 [ 1541.015825] ? do_raw_spin_lock+0xc8/0x240 [ 1541.020053] worker_thread+0x98/0xe40 [ 1541.023939] ? trace_hardirqs_on+0x67/0x220 [ 1541.028256] kthread+0x354/0x420 [ 1541.031611] ? process_one_work+0x1750/0x1750 [ 1541.036091] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1541.041616] ret_from_fork+0x24/0x30 [ 1541.045314] Modules linked in: [ 1541.051909] ---[ end trace 9da00ad8f7248eb1 ]--- [ 1541.056832] RIP: 0010:skb_put+0x35/0x1e0 [ 1541.057909] kobject: 'loop3' (00000000e384f361): kobject_uevent_env [ 1541.061177] Code: 89 f5 41 54 49 89 fc 53 4d 8d b4 24 c8 00 00 00 48 83 ec 08 e8 ec e1 0a fc 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 58 [ 1541.067429] kobject: 'loop3' (00000000e384f361): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1541.096572] binder: 4611:4613 ioctl c018620b 0 returned -14 [ 1541.097209] RSP: 0018:ffff8880572ffb28 EFLAGS: 00010202 [ 1541.108058] RAX: dffffc0000000000 RBX: ffff88808b9c6ac0 RCX: ffffffff84e1e854 [ 1541.116639] RDX: 0000000000000019 RSI: ffffffff85602504 RDI: 0000000000000000 [ 1541.124345] RBP: ffff8880572ffb58 R08: ffff888073924380 R09: ffffed1015d04733 [ 1541.131728] R10: ffffed1015d04732 R11: ffff8880ae823993 R12: 0000000000000000 [ 1541.139539] R13: 0000000000000001 R14: 00000000000000c8 R15: 0000000000000000 [ 1541.146887] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1541.155583] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1541.161650] CR2: 0000000000000000 CR3: 0000000091666000 CR4: 00000000001406e0 [ 1541.169552] Kernel panic - not syncing: Fatal exception [ 1541.176096] Kernel Offset: disabled [ 1541.179739] Rebooting in 86400 seconds..