t6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x210) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:32:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x42102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x11, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000034) fcntl$setstatus(r0, 0x4, 0x80000000002c00) timer_create(0x3, &(0x7f0000000180)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="df2b68dd3c04a6066c36886395220c93ff8bb214da7bf2beebde16359bd6fc5fb056f5ce46934d5a6ed4873c6ce3880b06f51b7a0103d032314d801eda55080be966827f123257e0f9c5c334d172e61de0a9cd17fcd6ddeac59eb61da01a1f25c0dfc57884060a83be2c47faadb22f4c79dacf7de1e537df2306ce3e2e95ea85e71cd96e8286ee1a4741aea08848806292aafa20871351047d96432226e177e5e7b187004bbb7f474f846b9c29c33f2db2", &(0x7f0000000140)="13f4fb6b4ed33e6dd91ace8120667bb362852cf54d7a22d3ec51b37705776119b486003929ebf097"}}, &(0x7f00000001c0)=0x0) timer_getoverrun(r2) 11:32:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x210) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:32:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000000)=[{}], 0x0}, &(0x7f0000000280)=0x78) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:32:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000000)=[{}], 0x0}, &(0x7f0000000280)=0x78) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:32:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) socket$packet(0x11, 0x3, 0x300) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000000)=[{}], 0x0}, &(0x7f0000000280)=0x78) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:32:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) socket$packet(0x11, 0x3, 0x300) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:32:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000000a004e2000000fffff020000000000000000000000000001af0000000000000000000000000000000000004af769341053670a5e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000ae00000001000000030000000a004e24000000070000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000003da47847dbeb5acee8868f90bf7551574000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0966b815c5d36ff0000000000000000000000ecff00000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000050000000000000000000000000000000106000000000000000000000000000000000000000000000000000000000000000000000000e460f50d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x210) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:32:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x210) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) [ 1409.831884] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1409.847682] binder_alloc: allocated: 1704 (num: 191 largest: 96), free: 10584 (num: 1 largest: 10584) [ 1409.864431] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:32:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000000a004e2000000fffff020000000000000000000000000001af0000000000000000000000000000000000004af769341053670a5e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000ae00000001000000030000000a004e24000000070000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000003da47847dbeb5acee8868f90bf7551574000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0966b815c5d36ff0000000000000000000000ecff00000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000050000000000000000000000000000000106000000000000000000000000000000000000000000000000000000000000000000000000e460f50d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x210) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) [ 1409.877586] binder_alloc: allocated: 1704 (num: 191 largest: 96), free: 10584 (num: 1 largest: 10584) 11:32:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x210) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) [ 1409.905876] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1409.927660] binder_alloc: allocated: 1704 (num: 191 largest: 96), free: 10584 (num: 1 largest: 10584) 11:32:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000000a004e2000000fffff020000000000000000000000000001af0000000000000000000000000000000000004af769341053670a5e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000ae00000001000000030000000a004e24000000070000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000003da47847dbeb5acee8868f90bf7551574000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0966b815c5d36ff0000000000000000000000ecff00000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000050000000000000000000000000000000106000000000000000000000000000000000000000000000000000000000000000000000000e460f50d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x210) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:32:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x210) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) [ 1410.150162] net_ratelimit: 18 callbacks suppressed [ 1410.150168] protocol 88fb is buggy, dev hsr_slave_0 [ 1410.160545] protocol 88fb is buggy, dev hsr_slave_1 [ 1410.230144] protocol 88fb is buggy, dev hsr_slave_0 [ 1410.236532] protocol 88fb is buggy, dev hsr_slave_1 [ 1410.310198] protocol 88fb is buggy, dev hsr_slave_0 [ 1410.315625] protocol 88fb is buggy, dev hsr_slave_1 [ 1410.950182] protocol 88fb is buggy, dev hsr_slave_0 [ 1410.955534] protocol 88fb is buggy, dev hsr_slave_1 [ 1411.030699] protocol 88fb is buggy, dev hsr_slave_0 [ 1411.036518] protocol 88fb is buggy, dev hsr_slave_1 11:32:58 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040), 0x1c) r1 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x30, &(0x7f0000000200)=[@in={0x2, 0x4e23, @rand_addr=0x5c39}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000002c0)={r2, 0x2}, 0x8) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000300)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) ioctl(r0, 0xfb, &(0x7f0000000080)="a822c60a8c91ed6b72359f6b180ee0a8f83d5c05b7cbb37e53bcafca5e15407fb0aaa3427021b5a2c9c7e6a88c35ee7511036cac794e3eea7f81117cfb43631572788733e9575ceaee7e6bf04ef8844cd2a86dd1abbb444865b5eda807e670a9be3fa30cb0df5818f2ba7b58837d3b130139c597e9faef62da344f3d7cceafc83c38d8b44f2f5c7dd0408a") clone(0x42102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x40c000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'veth1\x00'}) r4 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x11, 0x0, 0x0) ftruncate(r0, 0x401) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x10010000000034) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 11:32:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000000a004e2000000fffff020000000000000000000000000001af0000000000000000000000000000000000004af769341053670a5e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000ae00000001000000030000000a004e24000000070000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000003da47847dbeb5acee8868f90bf7551574000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0966b815c5d36ff0000000000000000000000ecff00000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000050000000000000000000000000000000106000000000000000000000000000000000000000000000000000000000000000000000000e460f50d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x210) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:32:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000000)=[{}], 0x0}, &(0x7f0000000280)=0x78) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:32:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) socket$packet(0x11, 0x3, 0x300) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000000)=[{}], 0x0}, &(0x7f0000000280)=0x78) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:32:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:32:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:32:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x210) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:32:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x210) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) [ 1412.850841] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:32:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x210) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) [ 1412.904389] binder_alloc: allocated: 1704 (num: 191 largest: 96), free: 10584 (num: 1 largest: 10584) [ 1412.924737] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1412.947001] binder_alloc: allocated: 1704 (num: 191 largest: 96), free: 10584 (num: 1 largest: 10584) 11:32:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x210) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:32:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x210) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:32:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x210) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) [ 1415.200222] net_ratelimit: 22 callbacks suppressed [ 1415.200226] protocol 88fb is buggy, dev hsr_slave_0 [ 1415.210770] protocol 88fb is buggy, dev hsr_slave_1 11:33:01 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) write$FUSE_BMAP(r0, &(0x7f00000000c0)={0x18, 0x0, 0x8, {0x8}}, 0x18) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) r2 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x42102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_buf(r1, 0x29, 0x11, 0x0, 0x0) ptrace$setopts(0x4202, r3, 0x0, 0x0) tkill(r3, 0x10010000000034) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x2, 0x4) fcntl$setstatus(r1, 0x4, 0x80000000002c00) 11:33:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000000a004e2000000fffff020000000000000000000000000001af0000000000000000000000000000000000004af769341053670a5e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000ae00000001000000030000000a004e24000000070000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000003da47847dbeb5acee8868f90bf7551574000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0966b815c5d36ff0000000000000000000000ecff00000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000050000000000000000000000000000000106000000000000000000000000000000000000000000000000000000000000000000000000e460f50d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x210) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) socket$packet(0x11, 0x3, 0x300) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000000)=[{}], 0x0}, &(0x7f0000000280)=0x78) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1415.830137] protocol 88fb is buggy, dev hsr_slave_0 [ 1415.836184] protocol 88fb is buggy, dev hsr_slave_1 [ 1415.886370] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1415.919871] binder_alloc: allocated: 1720 (num: 193 largest: 96), free: 10568 (num: 1 largest: 10568) 11:33:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x210) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:01 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x280, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x9}}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040), 0x1c) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x42102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x11, 0x0, 0x0) ptrace$cont(0x18, r3, 0x3ff, 0x401) ptrace$setopts(0x4209, r3, 0x0, 0x0) tkill(r3, 0x10010000000034) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 11:33:02 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x42102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x11, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000034) r2 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000100)={r3, 0x7fff, 0x30, 0x7, 0x9}, &(0x7f0000000140)=0x18) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 11:33:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x210) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x210) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) [ 1416.390119] protocol 88fb is buggy, dev hsr_slave_0 [ 1416.395554] protocol 88fb is buggy, dev hsr_slave_1 11:33:02 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x42102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x11, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) tkill(r1, 0x10010000000034) fcntl$setstatus(r0, 0x4, 0x80000000002c00) [ 1416.470113] protocol 88fb is buggy, dev hsr_slave_0 [ 1416.475695] protocol 88fb is buggy, dev hsr_slave_1 [ 1416.550110] protocol 88fb is buggy, dev hsr_slave_0 [ 1416.555671] protocol 88fb is buggy, dev hsr_slave_1 11:33:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x210) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:02 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x40000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)={&(0x7f00000001c0)='./file0\x00', r0}, 0x10) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ashmem\x00', 0x8000, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000340)={0x800100f, 0x9, 0x3}) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x27, 0x3, 0x4, "ded456b5ded046ef15ad8843ed5bbc7f", "dc33c45490b5b22f5893243977e6c6166ff3"}, 0x27, 0x0) sendmsg(r1, &(0x7f00000000c0)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)='a', 0x1}], 0x1}, 0x0) 11:33:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:02 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x11, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000034) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 11:33:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000000)=[{}], 0x0}, &(0x7f0000000280)=0x78) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000000)=[{}], 0x0}, &(0x7f0000000280)=0x78) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) [ 1417.029179] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:33:02 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)=0xffffffffffffffff, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000140)={r0, r2}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000020}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r3, 0xc00, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}}, 0x1) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={0x0, 0x7f}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000400)={r4, 0x30, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}]}, &(0x7f0000000440)=0x10) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) socket$inet6(0xa, 0x0, 0xfffffffffffeffff) clone(0x42102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x11, 0x0, 0x0) accept$packet(r1, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xa, &(0x7f0000000480)=@raw=[@jmp={0x5, 0x2afb, 0x7, 0xb, 0x7, 0xffffffffffffffff, 0x1}, @call={0x85, 0x0, 0x0, 0x17}, @exit, @generic={0xfff, 0x4, 0x4, 0x5776, 0x10000}, @call={0x85, 0x0, 0x0, 0x5d}, @call={0x85, 0x0, 0x0, 0x69}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff}, @map={0x18, 0xf, 0x1, 0x0, r1}], &(0x7f0000000500)='GPL\x00', 0x845, 0x29, &(0x7f0000000540)=""/41, 0x0, 0x3, [], r6, 0x15, r1, 0x8, &(0x7f00000005c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x3, 0x0, 0x7f}, 0x10}, 0x70) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r7, 0x1}) ptrace$setopts(0x4202, r5, 0x3, 0x0) tkill(r5, 0x10010000000034) fcntl$setstatus(r0, 0x4, 0x80000000002c00) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) [ 1417.079937] binder_alloc: allocated: 1760 (num: 198 largest: 96), free: 10528 (num: 1 largest: 10528) [ 1417.098838] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1417.114994] binder_alloc: allocated: 1760 (num: 198 largest: 96), free: 10528 (num: 1 largest: 10528) 11:33:03 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x42102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0x5, 0x8, 0xffd, 0x800, 0x8001, 0x10000, 0x10000000000008}) r2 = gettid() sendto$netrom(r1, &(0x7f0000000340)="8f60f58204ea68491dc59e23d7e796b56ba6d3d1ac87bda844894bac4f3b13e1962a312887d30623526f8f80c4ef3e33529c3ec4f255de2d0c4d28b1ebc256fa3c9c057f16f971e8382061f4a8c9327e74cdca6b6447870e98c9cc00aa9e25b86f1b7be8021886023c5164b0c927dc4c6f32caa2525104ca6d9e1fa412b13622a44d1f17ace9b05895270392710e8a0a9d702ba28d95b6ca45bccb8963cc870783a896d46aca554cf3ccc4", 0xab, 0x4000804, &(0x7f0000000400)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x48) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'nr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000006640)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000067c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x84001}, 0xc, &(0x7f0000006780)={&(0x7f0000006680)={0xd4, r3, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0xb8, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x995b}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40001}, 0x80) setsockopt$inet6_buf(r0, 0x29, 0x11, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000002c0)={0x1, 0x3, 0x4, 0x20011000, {}, {0x2, 0x0, 0x4, 0x80000000, 0x62, 0x3, "cc03df35"}, 0x7, 0x3, @offset=0xfffffffffffffffd, 0x4}) tkill(r2, 0x10010000000034) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 11:33:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:03 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x42102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x11, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x210010000000031) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 11:33:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x1}, 0x0, 0x0, &(0x7f0000000140)={0x4, 0x10, 0x8, 0x1000}, &(0x7f0000000180)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0xd7}}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000000)=[{}], 0x0}, &(0x7f0000000280)=0x78) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x0) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) [ 1417.721683] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1417.731386] binder_alloc: allocated: 1760 (num: 198 largest: 96), free: 10528 (num: 1 largest: 10528) 11:33:03 executing program 2: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1005, 0x0) execveat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000140)='&wlan0j\x86cpuset@em0selfsecurity-selinux\x00', &(0x7f0000000180)='\x00'], &(0x7f0000000200), 0x900) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000040)) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000240)={0x4, 0x0, [{0x0, 0xf0d, 0x6, 0x8, 0x4, 0xfffffffffffffff9, 0x2}, {0x80000007, 0x5, 0x6, 0x9, 0x9, 0xaa, 0x4}, {0x2, 0x3f, 0x2, 0x4, 0x8, 0x270, 0x36358648}, {0x80000019, 0x3f, 0x4, 0x985, 0x7, 0x241c, 0x7}]}) ioctl$int_in(r0, 0x800060c0045006, &(0x7f0000000000)=0x35) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000200)=0x8, 0x4) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000080)) 11:33:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x300001000008912, &(0x7f0000000300)="11e47bf07000005a7efec9012acee83300000000") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/526], 0x210) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:03 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x42102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x11, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:inetd_log_t:s0\x00', 0x21, 0x3) tkill(r1, 0x10010000000034) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 11:33:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x1}, 0x0, 0x0, &(0x7f0000000140)={0x4, 0x10, 0x8, 0x1000}, &(0x7f0000000180)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0xd7}}, 0x10) openat(r1, &(0x7f0000000480)='./file0\x00', 0xfccbdbb7c41df5ad, 0x44) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000000)=[{}], 0x0}, &(0x7f0000000280)=0x78) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1417.966664] audit: type=1400 audit(1564486383.796:124): avc: denied { relabelto } for pid=17357 comm="syz-executor.3" name="TCPv6" dev="sockfs" ino=214548 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:inetd_log_t:s0 tclass=tcp_socket permissive=1 [ 1418.015712] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1418.039121] binder_alloc: allocated: 1768 (num: 199 largest: 96), free: 10520 (num: 1 largest: 10520) 11:33:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x0) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:04 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x42102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000180)={"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"}) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1f, 0x4800) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000000c0)=r1) setsockopt$inet6_buf(r0, 0x29, 0x11, 0x0, 0x0) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000100)={0x4, 0x6}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000034) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 11:33:04 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x50) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='team_slave_0\x00') r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r1, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r1, 0x800060c0045006, &(0x7f0000000000)=0x35) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 11:33:04 executing program 0: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000040)) read$alg(r0, &(0x7f0000000080)=""/27, 0x1b) ioctl$int_in(r0, 0x800060c0045006, &(0x7f0000000000)=0x34) 11:33:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x0) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x1}, 0x0, 0x0, &(0x7f0000000140)={0x4, 0x10, 0x8, 0x1000}, &(0x7f0000000180)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0xd7}}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000000)=[{}], 0x0}, &(0x7f0000000280)=0x78) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:04 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000100)=""/180) ioctl$int_in(r0, 0x800060c0045006, &(0x7f0000000000)=0x35) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0xfffffffffffffffc, 0x5000) 11:33:04 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x42102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x11, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f000000060000000807000038060000b8030000a8020000b8030000a8020000380600003806000038060000380600003806000006000000", @ANYPTR=&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180160010000000000000000000000000000000000000000000000002800686c0000000000000000000000000000000000000000000000000000000000210000000000002800727066696c7465720000000000000000000000000000000000000000000001000000000000004800444e50540000000000000000000000000000000000000000000000000000ff0200000000000000000000000000010000000000000000000000000000000019370900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020014801000000000000000000000000000000000000000000000000300073726800000000000000000000000000000000000000000000000000000091a3ffdc02008e2c18100000000000002800727066696c7465720000000000000000000000000000000000000000000004000000000000002800000000000000000000000000000000000000000000000000000000000000fcffffff00000000ff01000000000000000000000000000100000000000000000000000000000001ffffffffffffffffb656087bff00000000000000000000ffffffff00ffffffff6263736630000000000000000000000065727370616e30000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006060d000000000000000000000000000000c80010010000000000000000000000000000000000000000000000004800444e50540000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000ff020000000000000000000000000001273580000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180160010000000000000000000000000000000000000000000000002800727066696c7465720000000000000000000000000000000000000000000004000000000000002800727066696c7465720000000000000000000000000000000000000000000004000000000000004800444e5054000000000000000000000000000000000000000000000000000000000000000000000000000000000001ac1414bb00000000000000000000000031233f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80020010000000000000000000000000000000000000000000000003000667261670000000000000000000000000000000000000000000000000000080000000000000000020000180200002800434845434b53554d0000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x768) ioctl$int_out(r0, 0x2, &(0x7f0000000080)) tkill(r1, 0x10010000000034) fcntl$setstatus(r0, 0x4, 0x4800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0}, &(0x7f0000000980)=0xc) mount$9p_tcp(&(0x7f0000000880)='127.0.0.1\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x1420c2, &(0x7f00000009c0)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@nodevmap='nodevmap'}, {@fscache='fscache'}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@access_user='access=user'}, {@access_any='access=any'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '!,(cpusetvmnet0'}}]}}) 11:33:04 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r0, 0x5423, &(0x7f0000000240)=0x8) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x309, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1000000000000}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004040}, 0x48000) ioctl$int_in(r0, 0x800060c0045007, &(0x7f0000000000)=0x35) [ 1418.675327] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1418.709479] binder_alloc: allocated: 1768 (num: 199 largest: 96), free: 10520 (num: 1 largest: 10520) 11:33:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x1}, 0x0, 0x0, &(0x7f0000000140)={0x4, 0x10, 0x8, 0x1000}, &(0x7f0000000180)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0xd7}}, 0x10) openat(r1, &(0x7f0000000480)='./file0\x00', 0xfccbdbb7c41df5ad, 0x44) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r5, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:04 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) write$evdev(r1, &(0x7f0000000240)=[{{0x77359400}, 0x13, 0x8, 0x2fbd}, {{0x0, 0x7530}, 0x1f, 0xdba, 0xc4}, {{0x77359400}, 0x16, 0x6, 0x7}, {{0x0, 0x2710}, 0x16, 0x100, 0x66}, {{0x77359400}, 0x17, 0x2, 0x40}], 0x78) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)='a', 0x1}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x72, &(0x7f0000000140), &(0x7f0000000180)=0x10) 11:33:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x1}, 0x0, 0x0, &(0x7f0000000140)={0x4, 0x10, 0x8, 0x1000}, &(0x7f0000000180)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0xd7}}, 0x10) openat(r1, &(0x7f0000000480)='./file0\x00', 0xfccbdbb7c41df5ad, 0x44) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r5, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x1}, 0x0, 0x0, &(0x7f0000000140)={0x4, 0x10, 0x8, 0x1000}, &(0x7f0000000180)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0xd7}}, 0x10) openat(r1, &(0x7f0000000480)='./file0\x00', 0xfccbdbb7c41df5ad, 0x44) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r5, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000000a004e2000000fffff020000000000000000000000000001af0000000000000000000000000000000000004af769341053670a5e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000ae00000001000000030000000a004e24000000070000000000000000000000000000000100"/264], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x1}, 0x0, 0x0, &(0x7f0000000140)={0x4, 0x10, 0x8, 0x1000}, &(0x7f0000000180)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0xd7}}, 0x10) openat(r1, &(0x7f0000000480)='./file0\x00', 0xfccbdbb7c41df5ad, 0x44) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r5, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000000)=[{}], 0x0}, &(0x7f0000000280)=0x78) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000000a004e2000000fffff020000000000000000000000000001af0000000000000000000000000000000000004af769341053670a5e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000ae00000001000000030000000a004e24000000070000000000000000000000000000000100"/264], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) [ 1419.609603] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1419.624359] binder_alloc: allocated: 1792 (num: 202 largest: 96), free: 10496 (num: 1 largest: 10496) [ 1420.550148] net_ratelimit: 18 callbacks suppressed [ 1420.550153] protocol 88fb is buggy, dev hsr_slave_0 [ 1420.560179] protocol 88fb is buggy, dev hsr_slave_1 [ 1420.630137] protocol 88fb is buggy, dev hsr_slave_0 [ 1420.635261] protocol 88fb is buggy, dev hsr_slave_1 [ 1420.710189] protocol 88fb is buggy, dev hsr_slave_0 [ 1420.715310] protocol 88fb is buggy, dev hsr_slave_1 [ 1421.350171] protocol 88fb is buggy, dev hsr_slave_0 [ 1421.355265] protocol 88fb is buggy, dev hsr_slave_1 [ 1421.440183] protocol 88fb is buggy, dev hsr_slave_0 [ 1421.447412] protocol 88fb is buggy, dev hsr_slave_1 11:33:07 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0xffffffd6) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x42102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() set_tid_address(&(0x7f0000000080)) setsockopt$inet6_buf(r0, 0x29, 0x11, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='eql\x00', 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x480, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000140)={0x8000, 0x660b, 0x5, 0x302}) tkill(r1, 0x10010000000034) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 11:33:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000000a004e2000000fffff020000000000000000000000000001af0000000000000000000000000000000000004af769341053670a5e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000ae00000001000000030000000a004e24000000070000000000000000000000000000000100"/264], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x1}, 0x0, 0x0, &(0x7f0000000140)={0x4, 0x10, 0x8, 0x1000}, &(0x7f0000000180)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0xd7}}, 0x10) openat(r1, &(0x7f0000000480)='./file0\x00', 0xfccbdbb7c41df5ad, 0x44) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r5, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x1}, 0x0, 0x0, &(0x7f0000000140)={0x4, 0x10, 0x8, 0x1000}, &(0x7f0000000180)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0xd7}}, 0x10) openat(r1, &(0x7f0000000480)='./file0\x00', 0xfccbdbb7c41df5ad, 0x44) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r5, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x1}, 0x0, 0x0, &(0x7f0000000140)={0x4, 0x10, 0x8, 0x1000}, &(0x7f0000000180)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0xd7}}, 0x10) openat(r1, &(0x7f0000000480)='./file0\x00', 0xfccbdbb7c41df5ad, 0x44) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r5, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000000)=[{}], 0x0}, &(0x7f0000000280)=0x78) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x1}, 0x0, 0x0, &(0x7f0000000140)={0x4, 0x10, 0x8, 0x1000}, &(0x7f0000000180)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0xd7}}, 0x10) openat(r1, &(0x7f0000000480)='./file0\x00', 0xfccbdbb7c41df5ad, 0x44) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r5, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000000)=[{}], 0x0}, &(0x7f0000000280)=0x78) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:07 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x42102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f00000001c0)={0x4, 0x0, 0x8, 0x7fffffff, 0x0, 0x9, 0x20, 0x1000, 0x7, 0xc000000000000000, 0xfffffffffffffffb, 0xffff, 0x3, 0x10001, &(0x7f0000000180), 0x9a9, 0xffffffffffff48d6, 0x8}) setsockopt$inet6_buf(r1, 0x29, 0x11, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, &(0x7f0000000240)={0x0, 0x401, 0x401, [], &(0x7f0000000180)=0x6}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x10010000000034) fcntl$setstatus(r1, 0x4, 0x80000000002c00) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) [ 1421.762685] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1421.782815] binder_alloc: allocated: 1800 (num: 203 largest: 96), free: 10488 (num: 1 largest: 10488) 11:33:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/396], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) [ 1421.813826] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1421.828883] binder_alloc: allocated: 1808 (num: 204 largest: 96), free: 10480 (num: 1 largest: 10480) 11:33:07 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040), 0x2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x42102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x40) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f00000000c0)) getsockopt$inet_dccp_buf(r2, 0x21, 0xe, &(0x7f0000000100)=""/159, &(0x7f00000001c0)=0x9f) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000200)=0xc000000000000000, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000034) fcntl$getflags(r2, 0x401) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 11:33:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/396], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/396], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/462], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/462], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x1}, 0x0, 0x0, &(0x7f0000000140)={0x4, 0x10, 0x8, 0x1000}, &(0x7f0000000180)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0xd7}}, 0x10) openat(r1, &(0x7f0000000480)='./file0\x00', 0xfccbdbb7c41df5ad, 0x44) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r5, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000000)=[{}], 0x0}, &(0x7f0000000280)=0x78) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:08 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)='a', 0x1}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x10) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r1, @in6={{0xa, 0x4e20, 0x3, @local, 0x8000}}, 0x8, 0x1}, 0x90) 11:33:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x1}, 0x0, 0x0, &(0x7f0000000140)={0x4, 0x10, 0x8, 0x1000}, &(0x7f0000000180)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0xd7}}, 0x10) openat(r1, &(0x7f0000000480)='./file0\x00', 0xfccbdbb7c41df5ad, 0x44) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r5, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:08 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) [ 1422.803422] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:33:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000000)={0x6, 0x8, {0x52, 0x3e6, 0x5, {0x5, 0x5b}, {0xfffffffffffff198, 0x9}, @rumble={0x2, 0x2d9}}, {0x56, 0xde, 0xe7, {0x5, 0xacf}, {0x900000, 0xffffffffffffffc7}, @cond=[{0x1000, 0x8, 0x9, 0x7, 0x7ff, 0x5}, {0x7fff, 0x5, 0x4, 0xc69, 0x80}]}}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x8, @local}, 0x1c) 11:33:08 executing program 5 (fault-call:3 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1422.847527] binder_alloc: allocated: 1808 (num: 204 largest: 96), free: 10480 (num: 1 largest: 10480) [ 1422.966833] FAULT_INJECTION: forcing a failure. [ 1422.966833] name failslab, interval 1, probability 0, space 0, times 0 [ 1422.979150] CPU: 0 PID: 17546 Comm: syz-executor.5 Not tainted 4.14.134 #30 [ 1422.986303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1422.995659] Call Trace: [ 1422.998260] dump_stack+0x138/0x19c [ 1423.001901] should_fail.cold+0x10f/0x159 [ 1423.006066] should_failslab+0xdb/0x130 [ 1423.010052] kmem_cache_alloc_trace+0x2e9/0x790 [ 1423.014780] binder_get_thread+0x1b8/0x750 [ 1423.019009] ? __might_sleep+0x93/0xb0 [ 1423.022896] binder_ioctl+0x18f/0xfcc [ 1423.026697] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 1423.032235] ? __might_sleep+0x93/0xb0 [ 1423.036114] ? __fget+0x210/0x370 [ 1423.039573] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 1423.045114] do_vfs_ioctl+0x7ae/0x1060 [ 1423.048985] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1423.053720] ? lock_downgrade+0x6e0/0x6e0 [ 1423.057867] ? ioctl_preallocate+0x1c0/0x1c0 [ 1423.062264] ? __fget+0x237/0x370 [ 1423.065727] ? security_file_ioctl+0x89/0xb0 [ 1423.070139] SyS_ioctl+0x8f/0xc0 [ 1423.073490] ? do_vfs_ioctl+0x1060/0x1060 [ 1423.077618] do_syscall_64+0x1e8/0x640 [ 1423.081491] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1423.086326] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1423.091492] RIP: 0033:0x459829 [ 1423.094659] RSP: 002b:00007fccc2af8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1423.102350] RAX: ffffffffffffffda RBX: 00007fccc2af8c90 RCX: 0000000000459829 [ 1423.109608] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 11:33:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x109000, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000140)={'hwsim0\x00', 0x8}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r3 = getpgrp(r2) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f00000000c0)={r4, r0}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) [ 1423.116859] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1423.124110] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fccc2af96d4 [ 1423.131359] R13: 00000000004c0d62 R14: 00000000004d3de0 R15: 0000000000000005 [ 1423.143024] binder: 17545:17546 ioctl c0306201 20000440 returned -12 11:33:10 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x42102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x834, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xfff, @ipv4={[], [], @multicast2}, 0xc0f}, r2}}, 0x30) r3 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x11, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x10010000000034) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 11:33:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/462], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:10 executing program 5 (fault-call:3 fault-nth:1): r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4a2ee9ac632ca554, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'dummy0\x00', 0x400}) 11:33:10 executing program 0 (fault-call:3 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:10 executing program 2 (fault-call:2 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1424.990647] FAULT_INJECTION: forcing a failure. [ 1424.990647] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.017730] FAULT_INJECTION: forcing a failure. [ 1425.017730] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.034536] CPU: 1 PID: 17565 Comm: syz-executor.2 Not tainted 4.14.134 #30 [ 1425.036248] FAULT_INJECTION: forcing a failure. [ 1425.036248] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.041680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1425.041685] Call Trace: [ 1425.041707] dump_stack+0x138/0x19c [ 1425.041725] should_fail.cold+0x10f/0x159 [ 1425.041740] should_failslab+0xdb/0x130 [ 1425.041753] kmem_cache_alloc_trace+0x2e9/0x790 [ 1425.041771] binder_get_thread+0x1b8/0x750 [ 1425.041782] ? __might_sleep+0x93/0xb0 [ 1425.041793] binder_ioctl+0x18f/0xfcc [ 1425.041809] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 1425.041822] ? __might_sleep+0x93/0xb0 [ 1425.041829] ? __fget+0x210/0x370 [ 1425.041843] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 1425.041853] do_vfs_ioctl+0x7ae/0x1060 [ 1425.041864] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1425.041874] ? lock_downgrade+0x6e0/0x6e0 [ 1425.041884] ? ioctl_preallocate+0x1c0/0x1c0 [ 1425.041895] ? __fget+0x237/0x370 [ 1425.041910] ? security_file_ioctl+0x89/0xb0 [ 1425.041931] SyS_ioctl+0x8f/0xc0 [ 1425.142152] ? do_vfs_ioctl+0x1060/0x1060 [ 1425.146323] do_syscall_64+0x1e8/0x640 [ 1425.150208] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1425.155059] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1425.160254] RIP: 0033:0x459829 [ 1425.163451] RSP: 002b:00007f3b9aa11c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1425.171680] RAX: ffffffffffffffda RBX: 00007f3b9aa11c90 RCX: 0000000000459829 [ 1425.179046] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1425.186336] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1425.193626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3b9aa126d4 [ 1425.200902] R13: 00000000004c0d62 R14: 00000000004d3de0 R15: 0000000000000005 [ 1425.208211] CPU: 0 PID: 17569 Comm: syz-executor.5 Not tainted 4.14.134 #30 [ 1425.215332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1425.224698] Call Trace: [ 1425.227302] dump_stack+0x138/0x19c [ 1425.230927] should_fail.cold+0x10f/0x159 [ 1425.235076] should_failslab+0xdb/0x130 [ 1425.239083] kmem_cache_alloc_trace+0x2e9/0x790 [ 1425.243933] binder_transaction+0xee7/0x5d80 [ 1425.248340] ? trace_hardirqs_on+0x10/0x10 [ 1425.252915] ? check_preemption_disabled+0x3c/0x250 [ 1425.257927] ? save_trace+0x290/0x290 [ 1425.261736] ? __might_fault+0x110/0x1d0 [ 1425.265792] ? find_held_lock+0x35/0x130 [ 1425.269854] ? binder_inc_ref_for_node+0xba0/0xba0 [ 1425.274777] ? lock_downgrade+0x6e0/0x6e0 [ 1425.278925] ? kasan_check_write+0x14/0x20 [ 1425.283157] binder_thread_write+0x55f/0x2220 [ 1425.287652] ? trace_hardirqs_on+0x10/0x10 11:33:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x3) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x2, 0x10080) r2 = getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)=r2) getpgrp(r2) [ 1425.291882] ? binder_transaction+0x5d80/0x5d80 [ 1425.296542] ? __might_fault+0x110/0x1d0 [ 1425.300601] ? lock_downgrade+0x6e0/0x6e0 [ 1425.304748] ? kasan_check_write+0x14/0x20 [ 1425.309006] ? _copy_from_user+0x99/0x110 [ 1425.313240] binder_ioctl_write_read.isra.0+0x189/0x860 [ 1425.318607] ? __lockdep_init_map+0x10c/0x570 [ 1425.323189] ? binder_thread_write+0x2220/0x2220 [ 1425.327939] ? _raw_spin_unlock+0x2d/0x50 [ 1425.332089] ? __might_sleep+0x93/0xb0 [ 1425.335991] binder_ioctl+0x2fc/0xfcc [ 1425.339808] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 1425.345453] ? check_preemption_disabled+0x3c/0x250 [ 1425.350474] ? retint_kernel+0x2d/0x2d [ 1425.354362] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 1425.359899] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 1425.365433] do_vfs_ioctl+0x7ae/0x1060 [ 1425.369321] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1425.374162] ? check_preemption_disabled+0x3c/0x250 [ 1425.379184] ? ioctl_preallocate+0x1c0/0x1c0 [ 1425.383594] ? security_file_ioctl+0x89/0xb0 [ 1425.387995] SyS_ioctl+0x8f/0xc0 [ 1425.391355] ? do_vfs_ioctl+0x1060/0x1060 [ 1425.395497] do_syscall_64+0x1e8/0x640 [ 1425.399379] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1425.402713] binder: 17561:17565 ioctl c0306201 20000440 returned -12 [ 1425.404659] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1425.404668] RIP: 0033:0x459829 [ 1425.404676] RSP: 002b:00007fccc2af8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1425.427391] RAX: ffffffffffffffda RBX: 00007fccc2af8c90 RCX: 0000000000459829 [ 1425.434665] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 11:33:11 executing program 2 (fault-call:2 fault-nth:1): r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1425.442025] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1425.449297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fccc2af96d4 [ 1425.456580] R13: 00000000004c0d62 R14: 00000000004d3de0 R15: 0000000000000005 [ 1425.463864] CPU: 1 PID: 17568 Comm: syz-executor.0 Not tainted 4.14.134 #30 [ 1425.470983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1425.480346] Call Trace: [ 1425.482948] dump_stack+0x138/0x19c [ 1425.486602] should_fail.cold+0x10f/0x159 [ 1425.490764] should_failslab+0xdb/0x130 [ 1425.494757] kmem_cache_alloc_trace+0x2e9/0x790 [ 1425.499446] binder_get_thread+0x1b8/0x750 [ 1425.503696] ? __might_sleep+0x93/0xb0 [ 1425.507814] binder_ioctl+0x18f/0xfcc [ 1425.511638] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 1425.517187] ? __might_sleep+0x93/0xb0 [ 1425.521078] ? __fget+0x210/0x370 [ 1425.524551] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 1425.530088] do_vfs_ioctl+0x7ae/0x1060 [ 1425.533972] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1425.538724] ? lock_downgrade+0x6e0/0x6e0 11:33:11 executing program 5 (fault-call:3 fault-nth:2): r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1425.542876] ? ioctl_preallocate+0x1c0/0x1c0 [ 1425.547291] ? __fget+0x237/0x370 [ 1425.550774] ? security_file_ioctl+0x89/0xb0 [ 1425.555191] SyS_ioctl+0x8f/0xc0 [ 1425.558563] ? do_vfs_ioctl+0x1060/0x1060 [ 1425.562740] do_syscall_64+0x1e8/0x640 [ 1425.566634] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1425.571490] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1425.576732] RIP: 0033:0x459829 [ 1425.579925] RSP: 002b:00007fe50423cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1425.587640] RAX: ffffffffffffffda RBX: 00007fe50423cc90 RCX: 0000000000459829 [ 1425.594914] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1425.602189] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1425.609468] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe50423d6d4 [ 1425.616745] R13: 00000000004c0d62 R14: 00000000004d3de0 R15: 0000000000000005 [ 1425.618654] FAULT_INJECTION: forcing a failure. [ 1425.618654] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.625016] net_ratelimit: 20 callbacks suppressed 11:33:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/495], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) [ 1425.625031] protocol 88fb is buggy, dev hsr_slave_0 [ 1425.625472] protocol 88fb is buggy, dev hsr_slave_1 [ 1425.626411] protocol 88fb is buggy, dev hsr_slave_0 [ 1425.626778] protocol 88fb is buggy, dev hsr_slave_1 [ 1425.689478] FAULT_INJECTION: forcing a failure. [ 1425.689478] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.709342] CPU: 1 PID: 17591 Comm: syz-executor.5 Not tainted 4.14.134 #30 [ 1425.716492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1425.725856] Call Trace: [ 1425.728731] dump_stack+0x138/0x19c [ 1425.732381] should_fail.cold+0x10f/0x159 [ 1425.736546] should_failslab+0xdb/0x130 [ 1425.740556] kmem_cache_alloc_trace+0x2e9/0x790 [ 1425.745240] ? __lockdep_init_map+0x10c/0x570 [ 1425.749837] binder_transaction+0xf56/0x5d80 [ 1425.754249] ? trace_hardirqs_on+0x10/0x10 [ 1425.758505] ? save_trace+0x290/0x290 [ 1425.762316] ? is_bpf_text_address+0xa6/0x120 [ 1425.766837] ? __might_fault+0x110/0x1d0 [ 1425.770943] ? find_held_lock+0x35/0x130 [ 1425.775030] ? binder_inc_ref_for_node+0xba0/0xba0 [ 1425.779964] ? lock_downgrade+0x6e0/0x6e0 [ 1425.784120] ? kasan_check_write+0x14/0x20 [ 1425.788357] binder_thread_write+0x55f/0x2220 [ 1425.792861] ? trace_hardirqs_on+0x10/0x10 [ 1425.797105] ? binder_transaction+0x5d80/0x5d80 [ 1425.801782] ? __might_fault+0x110/0x1d0 [ 1425.805959] ? lock_downgrade+0x6e0/0x6e0 [ 1425.810116] ? kasan_check_write+0x14/0x20 [ 1425.814347] ? _copy_from_user+0x99/0x110 [ 1425.818492] binder_ioctl_write_read.isra.0+0x189/0x860 [ 1425.823843] ? __lockdep_init_map+0x10c/0x570 [ 1425.828775] ? binder_thread_write+0x2220/0x2220 [ 1425.833527] ? _raw_spin_unlock+0x2d/0x50 [ 1425.837661] ? __might_sleep+0x93/0xb0 [ 1425.841534] binder_ioctl+0x2fc/0xfcc [ 1425.845410] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 1425.851037] ? __might_sleep+0x93/0xb0 [ 1425.854915] ? __fget+0x210/0x370 [ 1425.858446] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 1425.863977] do_vfs_ioctl+0x7ae/0x1060 [ 1425.867941] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1425.872969] ? lock_downgrade+0x6e0/0x6e0 [ 1425.877104] ? ioctl_preallocate+0x1c0/0x1c0 [ 1425.881498] ? __fget+0x237/0x370 [ 1425.884941] ? security_file_ioctl+0x89/0xb0 [ 1425.889334] SyS_ioctl+0x8f/0xc0 [ 1425.892699] ? do_vfs_ioctl+0x1060/0x1060 [ 1425.896829] do_syscall_64+0x1e8/0x640 [ 1425.900697] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1425.905624] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1425.910809] RIP: 0033:0x459829 [ 1425.913979] RSP: 002b:00007fccc2af8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1425.921681] RAX: ffffffffffffffda RBX: 00007fccc2af8c90 RCX: 0000000000459829 [ 1425.929300] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1425.936729] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1425.944006] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fccc2af96d4 [ 1425.951262] R13: 00000000004c0d62 R14: 00000000004d3de0 R15: 0000000000000005 [ 1425.959967] CPU: 0 PID: 17585 Comm: syz-executor.2 Not tainted 4.14.134 #30 [ 1425.967102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1425.967355] binder: 17562:17568 ioctl c0306201 20000440 returned -12 [ 1425.976457] Call Trace: [ 1425.976476] dump_stack+0x138/0x19c 11:33:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 11:33:11 executing program 5 (fault-call:3 fault-nth:3): r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1425.976492] should_fail.cold+0x10f/0x159 [ 1425.976512] should_failslab+0xdb/0x130 [ 1425.976524] kmem_cache_alloc_trace+0x2e9/0x790 [ 1425.976542] binder_transaction+0xee7/0x5d80 [ 1425.976552] ? trace_hardirqs_on+0x10/0x10 [ 1425.976562] ? save_trace+0x290/0x290 [ 1425.976570] ? finish_task_switch+0x178/0x650 [ 1425.976576] ? finish_task_switch+0x14d/0x650 [ 1425.976586] ? switch_mm_irqs_off+0x5e1/0xec0 [ 1425.976598] ? __might_fault+0x110/0x1d0 [ 1425.976606] ? find_held_lock+0x35/0x130 [ 1425.976622] ? binder_inc_ref_for_node+0xba0/0xba0 [ 1426.041143] ? lock_downgrade+0x6e0/0x6e0 [ 1426.045308] ? kasan_check_write+0x14/0x20 [ 1426.049656] binder_thread_write+0x55f/0x2220 [ 1426.054156] ? retint_kernel+0x2d/0x2d [ 1426.058050] ? binder_transaction+0x5d80/0x5d80 [ 1426.062723] ? __might_fault+0x110/0x1d0 [ 1426.066794] ? lock_downgrade+0x6e0/0x6e0 [ 1426.070958] ? kasan_check_write+0x14/0x20 [ 1426.075193] ? _copy_from_user+0x99/0x110 [ 1426.079350] binder_ioctl_write_read.isra.0+0x189/0x860 [ 1426.084727] ? __lockdep_init_map+0x10c/0x570 [ 1426.089228] ? binder_thread_write+0x2220/0x2220 [ 1426.094069] ? _raw_spin_unlock+0x2d/0x50 [ 1426.098219] ? __might_sleep+0x93/0xb0 [ 1426.102468] binder_ioctl+0x2fc/0xfcc [ 1426.106279] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 1426.111910] ? __might_sleep+0x93/0xb0 [ 1426.115816] ? retint_kernel+0x2d/0x2d [ 1426.119715] ? trace_hardirqs_on_caller+0x400/0x590 [ 1426.124746] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 1426.130289] do_vfs_ioctl+0x7ae/0x1060 [ 1426.134180] ? check_preemption_disabled+0x3c/0x250 [ 1426.139180] ? ioctl_preallocate+0x1c0/0x1c0 [ 1426.143592] ? security_file_ioctl+0x40/0xb0 [ 1426.148206] ? security_file_ioctl+0x51/0xb0 [ 1426.152615] ? security_file_ioctl+0x89/0xb0 [ 1426.157029] SyS_ioctl+0x8f/0xc0 [ 1426.160401] ? do_vfs_ioctl+0x1060/0x1060 [ 1426.164542] do_syscall_64+0x1e8/0x640 [ 1426.168409] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1426.173240] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1426.178426] RIP: 0033:0x459829 [ 1426.181605] RSP: 002b:00007f3b9aa11c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1426.189317] RAX: ffffffffffffffda RBX: 00007f3b9aa11c90 RCX: 0000000000459829 [ 1426.196593] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1426.205028] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1426.212372] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3b9aa126d4 [ 1426.220074] R13: 00000000004c0d62 R14: 00000000004d3de0 R15: 0000000000000005 [ 1426.230146] protocol 88fb is buggy, dev hsr_slave_0 [ 1426.235387] protocol 88fb is buggy, dev hsr_slave_1 [ 1426.296282] binder: 17608:17613 unknown command 0 [ 1426.313301] binder: 17608:17613 ioctl c0306201 20000440 returned -22 [ 1426.317487] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1426.340728] binder_alloc: allocated: 1816 (num: 205 largest: 96), free: 10472 (num: 1 largest: 10472) [ 1426.790159] protocol 88fb is buggy, dev hsr_slave_0 [ 1426.795267] protocol 88fb is buggy, dev hsr_slave_1 [ 1426.870116] protocol 88fb is buggy, dev hsr_slave_0 [ 1426.875226] protocol 88fb is buggy, dev hsr_slave_1 11:33:13 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x200) write$P9_RREAD(r0, &(0x7f00000000c0)={0xcf, 0x75, 0x1, {0xc4, "7aaddda4a1cafa7c98995962f2cf31098d0a41c6c55c64caef724c8273db0384ef2720aa77ace42943effab23da42815a67127a54524f25b1a94b1b244629a8948f835fd5c1e59985f5ee044e9be5634d3a333c7cee32ba4e8e0ffcda89e687f691a937f3298bc7c95dc488f1732ffad32916359781db5c4c80ca128f8f72a88a7b803c3bb83a80810ddfe3a08763cc2529252d6734c41860cf71552eb25f8a00ac92c2b44b902650f58c12c595f47ad85d3884f707495d798987329051567acdf0df262"}}, 0xcf) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x42102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000034) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x80000000002c00) 11:33:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x400000) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000000a004e2000000fffff020000000000000000000000000001af0000000000000000000000000000000000004af769341053670a5e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000ae00000001000000030000000a004e24000000070000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000003da47847dbeb5acee8868f90bf7551574000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0966b815c5d36ff0000000000000000000000ecff00000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000050000000000000000000000000000000106000000000000000000000000000000000000000000000000000000000000000000000000e460f50d00"/495], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:13 executing program 2 (fault-call:2 fault-nth:2): r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:13 executing program 0: syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x27c) ioctl$KVM_NMI(r2, 0xae9a) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080), 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="1c000000f95da3507eb04f4b3621c126dfddf1a431964552c700000000000000"], 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0xa68, 0x0, 0x3, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB=' c@\x00'], 0x0, 0x0, 0x0}) getsockname$unix(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) 11:33:13 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000280)=0x1) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000100)) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) openat(r0, &(0x7f00000002c0)='./file0\x00', 0x20000, 0x8) 11:33:13 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040), 0x1c) r1 = syz_open_dev$mice(&(0x7f0000001080)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000001140)=0x100, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x42102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$bt_cmtp(0x1f, 0x3, 0x5) modify_ldt$read(0x0, &(0x7f0000000080)=""/4096, 0x1000) r2 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x11, 0x0, 0x107) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x10010000000034) fcntl$setstatus(r0, 0x4, 0x80000000002c00) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001180)=0x1, 0x4) gettid() r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001100)='/proc/self/net/pfkey\x00', 0x10d000, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f00000011c0)={0xa, {0x5, 0x6, 0x0, 0x100000001}, {0x4, 0x400, 0x2, 0x6}, {0x8, 0x20}}) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000001200), &(0x7f0000001280)=0x68) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000010c0)) [ 1428.074050] FAULT_INJECTION: forcing a failure. [ 1428.074050] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.087373] binder: 17619:17628 unknown command 4219680 [ 1428.097891] binder: 17619:17628 ioctl c0306201 20000440 returned -22 [ 1428.117533] CPU: 1 PID: 17626 Comm: syz-executor.2 Not tainted 4.14.134 #30 [ 1428.124684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1428.134035] Call Trace: [ 1428.134055] dump_stack+0x138/0x19c [ 1428.134073] should_fail.cold+0x10f/0x159 [ 1428.134090] should_failslab+0xdb/0x130 [ 1428.134104] kmem_cache_alloc_trace+0x2e9/0x790 [ 1428.134115] ? __lockdep_init_map+0x10c/0x570 [ 1428.134129] binder_transaction+0xf56/0x5d80 [ 1428.134137] ? trace_hardirqs_on+0x10/0x10 [ 1428.134148] ? save_trace+0x290/0x290 [ 1428.134156] ? is_bpf_text_address+0xa6/0x120 [ 1428.134166] ? __might_fault+0x110/0x1d0 [ 1428.134175] ? find_held_lock+0x35/0x130 [ 1428.134192] ? binder_inc_ref_for_node+0xba0/0xba0 [ 1428.134201] ? lock_downgrade+0x6e0/0x6e0 [ 1428.134215] ? kasan_check_write+0x14/0x20 [ 1428.134226] binder_thread_write+0x55f/0x2220 [ 1428.200431] ? trace_hardirqs_on+0x10/0x10 [ 1428.204666] ? binder_transaction+0x5d80/0x5d80 [ 1428.209317] ? __might_fault+0x110/0x1d0 [ 1428.213361] ? lock_downgrade+0x6e0/0x6e0 [ 1428.217492] ? kasan_check_write+0x14/0x20 [ 1428.221708] ? _copy_from_user+0x99/0x110 [ 1428.225839] binder_ioctl_write_read.isra.0+0x189/0x860 [ 1428.232184] ? __lockdep_init_map+0x10c/0x570 [ 1428.236719] ? binder_thread_write+0x2220/0x2220 [ 1428.241455] ? _raw_spin_unlock+0x2d/0x50 [ 1428.245585] ? __might_sleep+0x93/0xb0 [ 1428.249459] binder_ioctl+0x2fc/0xfcc [ 1428.253243] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 1428.258763] ? __might_sleep+0x93/0xb0 [ 1428.262647] ? __fget+0x210/0x370 [ 1428.266092] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 1428.271610] do_vfs_ioctl+0x7ae/0x1060 [ 1428.275478] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1428.280213] ? lock_downgrade+0x6e0/0x6e0 [ 1428.284340] ? ioctl_preallocate+0x1c0/0x1c0 [ 1428.288728] ? __fget+0x237/0x370 [ 1428.292165] ? security_file_ioctl+0x89/0xb0 [ 1428.296578] SyS_ioctl+0x8f/0xc0 [ 1428.299923] ? do_vfs_ioctl+0x1060/0x1060 [ 1428.304055] do_syscall_64+0x1e8/0x640 [ 1428.307922] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1428.312760] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1428.317932] RIP: 0033:0x459829 [ 1428.321103] RSP: 002b:00007f3b9aa11c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1428.328797] RAX: ffffffffffffffda RBX: 00007f3b9aa11c90 RCX: 0000000000459829 [ 1428.336047] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1428.343300] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1428.350555] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3b9aa126d4 [ 1428.357809] R13: 00000000004c0d62 R14: 00000000004d3de0 R15: 0000000000000005 [ 1428.376241] binder: 17619:17628 unknown command 4219680 [ 1428.385785] binder: 17619:17628 ioctl c0306201 20000440 returned -22 11:33:14 executing program 4: syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x4, 0x0) prctl$PR_SET_FPEXC(0xc, 0x20000) r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x309d00) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80800) getsockopt(r1, 0x0, 0x80000001, &(0x7f00000000c0)=""/237, &(0x7f00000001c0)=0xed) 11:33:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x402001) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000480)={0x2, {{0x2, 0x4e22, @multicast1}}, 0x0, 0x7, [{{0x2, 0x4e24, @empty}}, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e21, @rand_addr=0x7}}, {{0x2, 0x4e22, @multicast1}}]}, 0x410) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1428.457828] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1428.491934] binder_alloc: allocated: 1816 (num: 205 largest: 96), free: 10472 (num: 1 largest: 10472) 11:33:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0x5, 0x0, 0xffffffff, 0x2}) [ 1428.571843] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1428.606208] binder_alloc: allocated: 1816 (num: 205 largest: 96), free: 10472 (num: 1 largest: 10472) 11:33:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x14) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x2, 0x6}) 11:33:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000000a004e2000000fffff020000000000000000000000000001af0000000000000000000000000000000000004af769341053670a5e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000ae00000001000000030000000a004e24000000070000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000003da47847dbeb5acee8868f90bf7551574000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0966b815c5d36ff0000000000000000000000ecff00000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000050000000000000000000000000000000106000000000000000000000000000000000000000000000000000000000000000000000000e460f50d00"/495], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) [ 1428.645604] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1428.658087] binder_alloc: allocated: 1816 (num: 205 largest: 96), free: 10472 (num: 1 largest: 10472) 11:33:14 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x800, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x400, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0xa0, 0x0, &(0x7f0000000540)=[@register_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240), 0x0, 0x2, 0x33}, @flat=@weak_binder={0x77622a85, 0x100, 0x2}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}, 0x1400}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000480)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x1, 0x2, 0xc}, @ptr={0x70742a85, 0x1, &(0x7f0000000400), 0x0, 0x2, 0x19}}, &(0x7f0000000500)={0x0, 0x18, 0x38}}}], 0x85, 0x0, &(0x7f0000000600)="fcc33f55b1ba9f2bb856febbb23e17695fdbed56048ed02b4ce6215fa839e3316f8daf4aae519b61d4ba8b10b2527d8fb4f253d3cc98772aad7acf06d74273da20649842b649c44abc55526c172dfa9f007a2ad1831e6ff7e6ae053cbb4608f41649d6728e52c4277654a6025ddbc8ca0846b4508b91bcb401fe6fc0ca2ab4710da473c35b"}) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mixer\x00', 0x40000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000180), 0x8) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [], 0x100000000000002e, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r5], 0x0, 0x0, 0x0}) 11:33:14 executing program 2 (fault-call:2 fault-nth:3): r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$KDDISABIO(r1, 0x4b37) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) [ 1428.830977] binder: 17666:17668 unknown command 7 [ 1428.844077] FAULT_INJECTION: forcing a failure. [ 1428.844077] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.857194] binder: 17666:17668 ioctl c0306201 20000240 returned -22 [ 1428.908197] CPU: 1 PID: 17674 Comm: syz-executor.2 Not tainted 4.14.134 #30 [ 1428.915357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1428.924726] Call Trace: [ 1428.927386] dump_stack+0x138/0x19c [ 1428.931030] should_fail.cold+0x10f/0x159 [ 1428.935193] should_failslab+0xdb/0x130 [ 1428.939180] kmem_cache_alloc_trace+0x2e9/0x790 [ 1428.943867] ? binder_alloc_new_buf_locked+0x8cd/0xfa0 [ 1428.949160] binder_alloc_new_buf_locked+0x451/0xfa0 [ 1428.954287] binder_alloc_new_buf+0x3f/0x60 [ 1428.958618] binder_transaction+0x142f/0x5d80 [ 1428.963203] ? trace_hardirqs_on+0x10/0x10 [ 1428.967446] ? save_trace+0x290/0x290 [ 1428.971257] ? is_bpf_text_address+0xa6/0x120 [ 1428.975859] ? binder_inc_ref_for_node+0xba0/0xba0 [ 1428.980793] ? lock_downgrade+0x6e0/0x6e0 [ 1428.984953] ? kasan_check_write+0x14/0x20 [ 1428.989282] binder_thread_write+0x55f/0x2220 [ 1428.993784] ? retint_kernel+0x2d/0x2d [ 1428.997682] ? binder_transaction+0x5d80/0x5d80 [ 1429.002379] ? __might_fault+0x110/0x1d0 [ 1429.006449] ? lock_downgrade+0x6e0/0x6e0 [ 1429.010602] ? kasan_check_write+0x14/0x20 [ 1429.014836] ? _copy_from_user+0x99/0x110 [ 1429.018992] binder_ioctl_write_read.isra.0+0x189/0x860 [ 1429.024388] ? __lockdep_init_map+0x10c/0x570 [ 1429.028889] ? binder_thread_write+0x2220/0x2220 [ 1429.033648] ? _raw_spin_unlock+0x2d/0x50 [ 1429.037805] ? __might_sleep+0x93/0xb0 [ 1429.041701] binder_ioctl+0x2fc/0xfcc [ 1429.045554] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 1429.051096] ? check_preemption_disabled+0x3c/0x250 [ 1429.056120] ? retint_kernel+0x2d/0x2d [ 1429.060008] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 1429.065561] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 1429.071106] do_vfs_ioctl+0x7ae/0x1060 [ 1429.075002] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1429.079761] ? check_preemption_disabled+0x3c/0x250 [ 1429.084777] ? ioctl_preallocate+0x1c0/0x1c0 [ 1429.089204] ? security_file_ioctl+0x89/0xb0 [ 1429.093613] SyS_ioctl+0x8f/0xc0 [ 1429.096979] ? do_vfs_ioctl+0x1060/0x1060 [ 1429.101132] do_syscall_64+0x1e8/0x640 [ 1429.105018] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1429.109877] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1429.115066] RIP: 0033:0x459829 [ 1429.118266] RSP: 002b:00007f3b9aa11c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1429.126066] RAX: ffffffffffffffda RBX: 00007f3b9aa11c90 RCX: 0000000000459829 [ 1429.133337] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1429.140609] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1429.147878] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3b9aa126d4 [ 1429.155250] R13: 00000000004c0d62 R14: 00000000004d3de0 R15: 0000000000000005 [ 1429.176688] binder_alloc: binder_alloc_new_buf_locked: 25489 failed to alloc new buffer struct 11:33:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040f0ce0a327f845655"], 0x0, 0x0, 0x0}) 11:33:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', &(0x7f0000000040)=""/46, 0x2e) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x800, 0x0) mq_getsetattr(r1, &(0x7f0000000100)={0x1f, 0x840e, 0xc0d, 0x100000001, 0xfff, 0x1bc, 0x4}, &(0x7f0000000140)) 11:33:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/512], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) [ 1429.226775] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1429.264080] binder_alloc: allocated: 1816 (num: 205 largest: 96), free: 10472 (num: 1 largest: 10472) [ 1430.950162] net_ratelimit: 20 callbacks suppressed [ 1430.950167] protocol 88fb is buggy, dev hsr_slave_0 [ 1430.960319] protocol 88fb is buggy, dev hsr_slave_1 [ 1431.190140] protocol 88fb is buggy, dev hsr_slave_0 [ 1431.190143] protocol 88fb is buggy, dev hsr_slave_0 [ 1431.190188] protocol 88fb is buggy, dev hsr_slave_1 [ 1431.195244] protocol 88fb is buggy, dev hsr_slave_1 11:33:17 executing program 2 (fault-call:2 fault-nth:4): r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) 11:33:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:17 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x42102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x11, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = msgget(0x3, 0x10) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000240)={{0x8be, r3, r4, r5, r6, 0x20, 0xff}, 0x0, 0xffffffffffffffff, 0x8000, 0x3, 0x671, 0x8, r1, r1}) tkill(r1, 0x10010000000034) fcntl$setstatus(r0, 0x4, 0x6001) 11:33:17 executing program 4: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x0, 0xd, 0x4, 0x2, {0x77359400}, {0x3, 0xa, 0x401, 0x1, 0xffffffffffffff8b, 0x81, "b8cf120e"}, 0xbd6e, 0x4, @fd=0xffffffffffffffff, 0x4}) flock(r0, 0x1) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x6, 0x4000) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000180)=0x3) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000200)={0x9, &(0x7f0000000100)=[0x9, 0x0, 0x7fffffff, 0x80000001, 0x8000000002143d, 0x2e, 0xfffffffffffffffe, 0x800000000, 0xe000000000000000]}) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/512], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x3, 0x4800) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000100)={0x9, 0x0, [], {0x0, @reserved}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x7, 0x240) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x9e, 0x0, &(0x7f0000000140)="1f3afc2dff2c1f973f5ad9b16c7d5fd790e63c3e9c1a3ff307a07b001eb0646fd44978ce7ce84664bd6fcbc2fa6f8fb22d95b8d74fa9e6452314212d39e2d4d91d45f3b7622fe8a1144b9db79ad797eb912778cbc389e4ab53d96a10a28ee826082e856589719d0b099417974a5235403d4f5eba409adffaa05fa340739b807f6036dc66b90d046738f2f7ace33de1b514bd6958bf7f3d7f32bc871ea19e", &(0x7f0000000280), 0x10001}, 0x28) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10401, 0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000000c0)) [ 1431.444915] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1431.464902] binder_alloc: allocated: 1824 (num: 206 largest: 96), free: 10464 (num: 1 largest: 10464) [ 1431.521327] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1431.552173] binder_alloc: allocated: 1824 (num: 206 largest: 96), free: 10464 (num: 1 largest: 10464) 11:33:17 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000000c0)={0x2, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @local}}}, 0x108) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x4, 0x4) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @dev}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) r5 = getgid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = geteuid() getresgid(&(0x7f0000000700)=0x0, &(0x7f0000000740), &(0x7f0000000780)) write$FUSE_DIRENTPLUS(r0, &(0x7f00000007c0)={0x2a0, 0x0, 0x5, [{{0x1, 0x3, 0x0, 0xffffffff, 0x2, 0x2, {0x0, 0x100, 0x0, 0x1, 0xfffffffffffffffa, 0x0, 0x1, 0x2, 0x1a0544e9, 0x80, 0x9, r2, r3, 0x5, 0x10}}, {0x3, 0x2, 0x0, 0xad}}, {{0x6, 0x2, 0x4, 0x1, 0x3, 0x4, {0x3, 0x40, 0xfffffffffffffff7, 0x9, 0x5aa5, 0x100000001, 0x2, 0xfffffffffffffff9, 0xeca, 0xfff, 0x1, r4, r5, 0xd7cf, 0x9}}, {0x2, 0x8, 0x9, 0x8, '/dev/dsp\x00'}}, {{0x6, 0x1, 0x401, 0x3, 0x400, 0xff, {0x5, 0x4, 0x3, 0x10, 0x5, 0x73, 0x46, 0x9, 0xfffffffffffffffd, 0x7fffffff, 0xbf22, r6, r7, 0x2, 0x1}}, {0x0, 0x0, 0x9, 0xfffffffffffffff7, '/dev/dsp\x00'}}, {{0x3, 0x3, 0x4, 0x7f, 0x3, 0x8000, {0x2, 0x9, 0x5, 0x8, 0x2, 0xea06, 0x1, 0x9, 0xf32d, 0x1, 0xfff, r8, r9, 0x7fff, 0x2}}, {0x1, 0x5, 0x9, 0x5, '/dev/dsp\x00'}}]}, 0x2a0) 11:33:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000100)={0x7, 0x7f, 0x2}, 0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = getpid() r3 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x0, 0x2) migrate_pages(r2, 0xbbb, &(0x7f0000000280)=0x1f, &(0x7f00000002c0)=0x8) read$eventfd(r3, &(0x7f0000000400), 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1f8de26d65ba4751ccbf6c391305f8d1bb67f85188904811a920ce0eaa1047406394f2c0c124dccff5def953f570b4253d393c69d88924d3c2c35b2e4b8738af869e2d7d28f4cdb83ab40ae8ff66d6745c88dc705167a0a131cefde8d976b23f50abf153371c4c8ed34a5669a37837f7d2db4091b7ca24146c4a72c80ea50173c839cbca1c23c065b13ad09faaaf3b65ab28950f0b27b0c82d850e0fada2e4a2fb53f3ca6d05a8d089062b127dea385c916be594f5de0a36f30922df66084f994e9fb838974d5fa9b5a4f8189b5801000000000000009d33aa3bc85281e252433025aa9d04a0fc762c0ae9b876f3f2a27d59e9e454cd2f4a85b7c289740c0c28fdbe1c2a6f17afee1cf9794e67d56a52ad7ad66b7a6f301f45fc69001771b289148e32c2ea3603c35e994cd9ac1353d58b688749bdb3cba74fb1f7b73f8a923620459eff6b5fd3e965926f810b409808b9d175882605720729c9635b008471a96d9e353ea125b8ed6b39274da1a01f827ac693e92effbdb89aeec0db72e80d6c5d2229afe53d06308fa4f34ba784126dcd38bede"], 0x0, 0x0, 0x0}) ioctl$FICLONE(r3, 0x40049409, r0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000140)={0xb3c9, 0x2, 0x7dc, 0x2, 0xb, 0x5, 0xffffffffffffff80, 0x1, 0x0, 0x4}) write$P9_RREADLINK(r3, &(0x7f0000000640)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) getsockname$unix(r3, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e) [ 1431.588881] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:33:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ipx\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000004cc0)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x3f, 0x2) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000100)={{0x2, 0x4e20, @multicast2}, {0x7, @random="76e25803f333"}, 0x8, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'bridge_slave_1\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000200)=0x3) [ 1431.644825] binder_alloc: allocated: 1832 (num: 207 largest: 96), free: 10456 (num: 1 largest: 10456) [ 1431.698709] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1431.714631] binder: 17745:17748 unknown command 1843563807 [ 1431.730450] binder_alloc: allocated: 1840 (num: 208 largest: 96), free: 10448 (num: 1 largest: 10448) 11:33:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/512], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000200)={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00', 0x0, 0x3, 0x0, [], 0x23a, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}) [ 1431.746333] binder: 17745:17748 ioctl c0306201 20000440 returned -22 11:33:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={0x0, 0x0, 0x5}) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000280)="aa79732131fa425b8ebb1d24d2acbb554caa18b2e43228e1c716734eb51bb4907ad9c795b83618885a0298d03d91492c7689bd4a670f0f3b056299b6d4e9b70acc9d0d0e68ed42a7ba0f3a443bf07ef0dbe6c54572eb031b44c4eac64c0e420a23f6edb0a4fff5a8eee5cd0bc803bdb0de64993c0651bd5ad9822b0e1eca964d157835d37a04c776f4f4da808da0b5dfbca680b596aec43ac20a98967d13853099c456bd45d5479d92b7e06d27e2c485e90fe80d4c88d80bf4a234d994ce6c655835b6d8f2a9cd80d83f7cfde3d07003c0f865d006998297eb2cb773f5bb757562ff1fe2acd5bb19df56d489a3d4009e3c0b5cb9f92206e00e109342afbfb0308de3dd90c97afee36f13fd179748ad336d8a962ccdb1605d0bd8cf95d1a95e84ad7f67f0d4cdfb78d77a99e62b7db2a87ea1e757486fa1e72f3611531aaaf624fe620653d3e99ec404e222311994f25b95d82a1fae081061dea324496841d162c7d060dea92cc41249e7e58d1149b3ce8d20f9d7daf75ec2cf5aa32616e6d3db0c7c9193fbb6c1e0a8028a57fcc8101c523415beddb206120d4a47ff787b8e789ac640b4ce0fbb6c7abf42a891407a93dadb22ef77635be8b0523cbb233a77ceb58f18d5c2e49dd67688ea2421f72c5eb5a83c7d8360160f2d162869f7a5b7660ac44eec54bec75603ad459c33e0da8a6bb29e8a224c7719ee5b4bca7a33464e8dbbdf04abbe846d66dfbd0ee26c424673170e3b02557f7d5b0bfd5bd880373526001dd957282e25eb9d14f38cd1dbbb04a90cd53ae392ab8c1d577bba0d18fa490015c2a923a493537b660f990b75efbd4fb56fc547c71dddfd94172557509cd508f95b1af1649f1cfbc8f7f624971e0ce0824510d20e8b28bd369aa9c5d92ea854b5b10df37fb9c4682be0b760124965cac7f9a30bf2c74342b85f40b4d3ddb960427dab205ac122488e82f0f66c6a5e600bb2a0d12aff3164868fb7d34b9e8ac88cc7ef6d0c49ce7d5e05bee0eb55334ecc1e27803f7659a29608eeb84542d6ea7cb7814ad60a040797b509ac85740c8a7ae59b19f989609c44c2afb811734fc16fe45f69ea09d1cec873ac3eb92f5e75c82c8c84ca78109ab951dd4fd19b7b2aef00e5cfd658bdd808e02b4884f82e8cd12473d9c01952a2100aae01473ebb248cb8abf5fc710160a7fb50bbac5506a6b90fe4b003b3a4e6be15ce4a3c03d39be07fe9c32b3631db152c60d38abd266b35c60d7a4f6f77eb9199a054a9449d74d056120c4ae606c2a362185b6e58cf8fabfe21afdaaeefd6bc468bad8510ac6b1d9be241cff6aa6673d2f4330f68b5e380f185bc8138644692f7c4c258333abe3eb4df64e474e716f298d86aa2d9bf83a066bf4d30dba471a475eb92bcf7d2c4e2c7d4e960e779e4f993d1ffd49876eca85a69885de4554c070f3198241f3a4d3e48f456867349a344d5032a4bec4f72b1e748bb529a5c0d89ebae240d6ebf764b8a11295b4001fabedb4909ad8644b8a77260fbdf036ee5410086e2ae8ebd7c7826e33a2fc3c7973f43eb898cb2f05aaeaf05220feacd4d2a212e960a3911e6aa64cd691e699362f5a1811191af1ae1d7e2d4694187422e36edad9708b1be44458def3ba03a0c8cde1d6b7b10adeea9490b39a5b7d7045e3e5e703156b858e5515521c6432e2a55e55652019d426062dbe3e3a95facf43f7e992944cfe471ae3f9ae3ea5b9d342c3e881b5be06513bd044f87eef00d311db19b5eb1984a2d7535ad5a3e07f544d0515bd5fddb21c199bd85d3c6b0a42a31433a47a4dc8ef8b869547ac4497f2ce3cff8059d03837f46ffde1a1e55b7d7d032fba94fc8d5b4db39a05554052118ba1248cb997a40bc8b95730a50a0b5e39803ac938f4b8471c16f29bd3706e30b069b4bac0b56bb1837611340dcc490600b59effbfcfddb74603e0e19ef2ce0b995c0d760e7c568aed91236e897e22e034cb4d2f052ad0cd90ae2bcb1aac1ff5f4b0f62363190373d8f69b866af55f2dd1d968d1fb3baccd17b62f4013617b937ac598e191c875c5e11f436052579e814e96ab4a18e0471de40e1c4a60ee09087096bde6cb402f650a7754d143259d389c5c6deddc5a07ddae413165cd1d5f7d0d580caf7cc0a68d9d973565d34ecf6cb0116dd095a0e878ddf359fc7a2bd5a0a9d03376d570d917278aaef10fbfdaec6beda93ba5ed13d42befbdf43fe923ccdc9680a664b2888595542f8ee8530a993bc2ffdda87914c049e53695c6b381999dd2bd4ac6827c2701a1bd9b11b1c5b301315cde3d12b9108577f5669c64f0e33a5e15c1a47e84c4d264786ca6c8a88ed42806efb6d5685dff964236044d8e329c227fedc9ed9f2c5807d42b791ae30e4a14b9545e5c04db4b6b64cf296731d8a1d608117ab66aa26802a67171021e40661cd8824235598420875c19f238f0c4a0a8aecc6323e1e52b522b52ee89523bfbef718767566c03b95356589b46d665f67e3325aee728f2723ef4dbc13a8d9550e33f0fc4e84624d2b2e951da063174cb15769dea79d6ee968c21849264fb29989372d7b3d3b7f40b1128dd96c9931da0547f6ef9bc4e5fa460d82cd340bc45a7f65c6bcff9555fd8f039c37f57a757ae51804fbb5a953e6c22426300d10624bdd17737988f61f7ad96e969efa9b493eff0b1b6be654aad708369a75bf7d27de65a08aabe31d9d2887c79cdbcf8da243008a4c0876ae1311746d6f7401f9bb7b2c6eba8d28224bb335a93b7abd75b93680ecf8a19ca0d98416caf629b726d329e30c5c7d1486da0a658f435643f0da79c7392e6fea8c0472553f5e5981519358ffdd7b3f733f17293471d460f0e7f56ece202d4a06aca450a44e9c14dea74a83f6f502e514ba440a8918f083d3cde085af9d4c0c83aae273416233ba96897800b765f8f7e2187baecb2d692629b7d7bb0568a3e27d338c27b6ff27bf323f22f6a1e324bb8f199ec90e5d6954a22bdc99da495d93c6676f2f70e560d124ec457690c2225f093d36321b62ebc9ee681b004e1485ca871a699724c87f929ba861071992c67a3c249769d2e77a9807fb4bf1467007d6d46b76f26b80b5220b79205f72fe65d499c3b2b264decadbac1a9298a6011a22b4ea9266cf0f5b569718a5cc4c4dd0c9cc2da930046c34bc78c55a780a4026a36661d40052eb59afe1ccde1cfa35349bc6706cfed779a0a231657b5580fdb91918650498a67728650e20cc96ba6465120a53615b06f1413287fc3167e3780cad4bbee0c534f02f01a4b8d3425337c270621bedebe90301574aa3d4828ba32b2b36016b30d0805b52bc4c7695b31ddf18483e6e215c1b88dc2d999f8ad9d33e122d1e40c2b95b197dfc7c81eacdca45ab1729b49a5d050201343b38f7cefaa0c9fc77279ef534ab1118a002a4377c90c205065a1aaab2a2eb2ccc83664e0f81613f211fdd7754b4aea4cc56ca570d2d066c296805f508b7ab9c80f3057777f91b7deca975d68b0fd7eb0e666fb0197aa319d3656cd466ad56f1e057a4d868b8b71e7704b1679ee1f33aa0a3bf1995ec09c0038a5cc8eec6283d830fdfa7463daa49d981e06b46eda19cece0a7c43a8be23b64193942e2f2e6dac8574d82b20502b3e3d87725fd1af8595b2515743ff6213426c94554784773f27e329a7b81a7adfc668e422a485c83a9ddfcd35f06e29f6a4d2aa0a2a5e14b3ab1bb44b6e068e6c5ed8f1370f9306783771c9580dbb953cc7228cadbaadfed4add02308819d7c956fa9df6fc91c0998aac3bf05cc7f282e27825f2cb5f5ad5c9f05c070cda5e0ef6922e111ad171d42a4ec3254a73ca117bddea2e3be1a857d980653014b4a0f46ddb59d8eb56dadb97e2f784c79ad70258b41fc5d7c155fe40060fb58435e401bd826b8a3554f848ff53e870379ee2f5dcb5e1d798e136e9ef8591ea30206cc07437f6f5dc7d11d2a25ee382dd0c1bd76efc8be6bf35219abc2e8487a8df5d3fcdcecae8489d3889ff8095a39b537cd22f5c14dce35aba93bdb3d330569be35c8209271b31ae282940d09b2cd0af1d6d1d686465bccbeb8de924337cd1191ffb056ee6d117cb0af06c064776a81cf3723a26489504b12bb763b5df000d8d890512ad375dbb0bab84a51e1f55684a8a39e543e586fafee90a3d5f2fc79388f228834da9f67327b116223f850f25ebf3a74d65b48b2da2ad9e6dcad99cf98885f830bca0a489555fa5d35b6b33fb5a60b81d2276b7deee570f16d0d9c57e6864d47a805215f983d36e9e42aa463115f8e908189d163cd73f241582ba3780b9002216fb93582b4d8fdbb54550e8f75d26d8eadd3debfe9328ad5295645bf9d72798c317726172cf0d0ca9229e35a123827713323a9f4ef6f32a6956246d0c530a9b49340d7c7ac54df4336073edc642a5a4600c65ef0af8d766ad4faf43730e5a67469e49cfabaa6c877ac9ccf8b75cfc5b5f1ea829b30ab1e5b9c354c929ae1ea656129e6d931ea9851389cb544003aebd2cdbf38cd6037e9d02d7b99ad70ff7869f738610cf568292e839328ecd76285d76aeed4b9b5573ebc7de843cf08dd1b994dc7824845d0a31168a5f5978b3dc516b59867b4e6942a982d58cf34cd223b6b2ba1873489e88e2bc52c0368d70ea464c9f721e7454599c5efb4ab7218f24ef7c372ab7e7aeac6a73d8a804aa4aca7bff0129cf39d4a4695c1b76659d985194b443b62942d86ec09049192cf5d1da804ce3dd4a23c7cd4d12b8d7226a852440fa7fbd6ff3473ef27d51c75b0bef49e6512a0ba65db1af3d7ac44ba40d32031adb5602416d1bca79c490d28d508ee5c864d2850905cd4428b6ff5174d7149cc92a2a07f0c6ec93b0654e67ef1da6804d026bee81c84db16639e7ba21f0236031c753f6243bfe2cbf6e9e048a4af57d14ef04d843dbbae46bb71cb604a8ed712dcb5c7f0416a645dff20e542d58e3000be0dc727cd5b0156de6f68a6de702b8eeffa3b74186faede8c8a12bf43ed70b08f99840127232a9c542eb1954bf7f986e93f596e545256b7cdce40a70a21536715430c2575a954d19344c75a18d2f43fb38a0a5b324987978c5c84e71bffd516eb62bfa94189ae88590690f979459a554009ff8d7cef7366c90bdfe0937636f2d599795f947336b5475378847140c115fe2e58337f3ed8d6483cbad4302340bedf7194200d496c81d0e29ebcc647827a9e0d634f7d812d9ed4b5434f2975a8cb0fc64c956e6ba16fd068abb73432741ca8210e869471642e5c7add4806395c7c03e2c43011d1364d90f1ee17798a45cc3b339d484ed47415e3583146d61a448d14c7385320fc78cfea346d87edb7789571e7e4a059b7f3528f7b24bca7196c0e5c9f2308d440598f0c0823b0203355dab7b80a91069f5c592ff747ae7cae7dc0e1c8040323ab811335a6020fafe74cecb4dcc5446b464c664a494a6ee546981ae54be1cf41c6642fc4e51bb9b43e2b30429cf9e4333a07da4d851a09c077f9ff1f473be6d2c27949467da7420995c53eb64834f7ca7f39edf2c1e3b3291df8811610cb4bc0b9857e980f9304adb53c8c031ad4284d9435659672755e19d3ef8748dbe2057bfa65feca523769f77bc9a862fb9d4bd9e25ad934ecde6c7638c0e92f48db6451bf653bca91251e2b367afa316406db01ce78c2969e1ab31067d6dc0963942d9513170f75e86f8ec82fe6d72fc54644c1fa278f24d0a35f6245bc58bc30d0012534de56f0fb1d33beed1c78739c0166b8b70c4068ec40c85f7804a4daf54c3", 0x1000, 0xfffffffffffffffb) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001280)={0x0, 0x0, 0x0}, &(0x7f00000012c0)=0xc) keyctl$chown(0x4, r2, r3, r4) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100)={r1, r5}) 11:33:17 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x10040, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="0c00000087002c5e0ce1c8a9de968dcf66fa6cc5f9f4ea70e902e2ca3151288f33df82cd3895bca6cf239617697826fa8b2e13098131ef1cb166e3384800000100ff236e9fdfc9533a6f62f108e0be5f0dd3ae844a83d0aac9da8a22235ed08bdd13902a7c2b15a1c6bddb9708f13a04da72d1aa5363a79100bc9711fc7daa05000000c6ac8b2cea08bb0abd1f"], 0x8d) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x42102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x11, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x10010000000034) fcntl$setstatus(r0, 0x4, 0x80000000002c00) r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x0, 0x101000) ioctl$sock_bt_cmtp_CMTPCONNDEL(r3, 0x400443c9, &(0x7f00000000c0)={{0x2cc, 0x9, 0x7, 0x6, 0x3ff, 0x8001}, 0x6467}) [ 1431.823100] binder: 17745:17761 unknown command 1843563807 [ 1431.830202] protocol 88fb is buggy, dev hsr_slave_0 [ 1431.835433] protocol 88fb is buggy, dev hsr_slave_1 [ 1431.840565] protocol 88fb is buggy, dev hsr_slave_0 [ 1431.845697] protocol 88fb is buggy, dev hsr_slave_1 11:33:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000180)={@loopback, @empty, @remote}, &(0x7f00000001c0)=0xc) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f0000000100)=""/47) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='OcZr@'], 0x0, 0x0, 0x0}) 11:33:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0xfff, 0xffffffff}) 11:33:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/cachefiles\x00', 0x80000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xe0, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="7f7e7c5994b530917438134a86bf58b3"}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1431.878935] binder: 17745:17761 ioctl c0306201 20000440 returned -22 11:33:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffffffffffffe9d, 0x0, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f0000000100)=ANY=[]], 0xfffffe38, 0x0, 0x0}) [ 1431.966085] binder: 17780:17783 unknown command 1918526287 [ 1431.986994] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:33:17 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xc040, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) [ 1432.009995] binder: 17780:17783 ioctl c0306201 20000440 returned -22 [ 1432.022789] binder_alloc: allocated: 1856 (num: 210 largest: 96), free: 10432 (num: 1 largest: 10432) [ 1432.054708] binder: 17788:17790 ioctl c0306201 20000440 returned -14 11:33:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404050eaadc60eacccfb214df256641bb6f1e1808ac5fd7fc91e2ce94ffa103362a716cdafde922d4ecdd2abaef3def7cf471aedee53882034322bc42bc7aa8d05d975038ebf1c6d397d3af53568b8975e884dbc3cac6c8e73d5f8f34200eeb1e6a912056543beb81dea6414f4f256e98de48472582e7ecf83017b7d09ff6af021fe52b1e46ec6fcc5cd"], 0x0, 0x0, 0x0}) 11:33:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0xfffffffffffffffc, 0x4000) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101800, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000140)="555316bf54a7bc58414246e5059b5255ad0fa92d274e97ca301bec2b1ebc4c927990460eae6ad7c5ab4b07359f7e7c087e791d6526479bab7647289532ad1ce43237d0b59105b37cc1347ef04ad324703ca42a5444fe86") ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000100)={0x0, 0x5, 0x4, [], &(0x7f00000000c0)=0x80000001}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000040)={0x1, 0xffffffff, 0x7f, 0x4, 0x1}) [ 1432.060429] binder: 17780:17793 unknown command 1918526287 [ 1432.068162] binder: 17780:17793 ioctl c0306201 20000440 returned -22 [ 1432.085766] binder: 17788:17796 ioctl c0306201 20000440 returned -14 [ 1432.089914] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:33:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x5, 0x4080) recvfrom$rxrpc(r1, &(0x7f00000001c0)=""/49, 0x31, 0x101, &(0x7f0000000280)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffffffffffffe80, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r2, @ANYRES16=r2, @ANYRESDEC=r0, @ANYRESHEX, @ANYRESHEX=r0, @ANYRES32=r2, @ANYRESOCT=r2], @ANYRES64=r0, @ANYBLOB="53dbb4cfdd94f219e30aab7120d26e9521d51384aeb0f6edfec8622136044b1705438859ce80ec0ee325"], 0xfdf6, 0x0, 0x0}) [ 1432.136812] binder_alloc: allocated: 1856 (num: 210 largest: 96), free: 10432 (num: 1 largest: 10432) [ 1432.241625] binder: 17806:17810 ioctl c0306201 20000440 returned -14 11:33:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/520], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x21, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="981f6c0d5b42fae571c96d09a80952755bdac9fc98489ad24ed09c3a2b3bf4011988c73b6315cfefe0b45ed3947fd4d8b676e549998b6390aac6dbf0462f231499227810ed4886719c05ad2fcb7b0f364d67594ad259ec78019c44bb703d87a8daf168054416c5c309fe658093dcc10da3f8e9865cce03dad656e650542069e7cf8804bdaf84d4cf0a6869ac91b9c22b25312dcdcbbf214d321e220976248670978cbb27110cb8092563e7f328e196470f65a1f7481739e06fbb9b7743ed44cc55c3"], 0x0, 0x0, 0x0}) 11:33:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00624040e8160882fb75480800000000000000c7a95832b82e4fa85055dde1466efea012dd7ea882310e649b2cbc532d53370fcefa051c2ba626598c07e997c170c122d2af95019b2c05b8b907d8d0e3f21908369b08c09fb175d6eeff1d9ad17f36fef2b8d03a985942fa91b5169aaf10ea"], 0x0, 0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000140)={0xffffffffffffffff, 0x3, 0x8, 0x0, 0x3f}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x7922, 0x8000, 0xde8a000000000000, 0x1, 0x10}, &(0x7f00000001c0)=0x14) pread64(r0, &(0x7f0000000340)=""/176, 0xb0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000200)={r2, 0xfffffffffffff694}, &(0x7f0000000280)=0x8) [ 1432.377662] binder: 17817:17823 unknown command 225189784 [ 1432.377800] binder: 17818:17821 unknown command 1077961216 [ 1432.391249] binder: 17817:17823 ioctl c0306201 200001c0 returned -22 [ 1432.394798] binder: 17818:17821 ioctl c0306201 20000440 returned -22 [ 1432.403931] binder: 17817:17827 unknown command 225189784 [ 1432.416732] binder: 17818:17830 unknown command 1077961216 [ 1432.418075] binder: 17817:17827 ioctl c0306201 200001c0 returned -22 [ 1432.423354] binder: 17818:17830 ioctl c0306201 20000440 returned -22 11:33:20 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) clone(0x42102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x11, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x10010000000034) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 11:33:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x200000000011, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) getuid() 11:33:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e570fe7b8c4a25061daf00e20c14745d00010500"], 0x0, 0x0, 0x0}) 11:33:20 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x2) 11:33:20 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) accept$packet(r0, &(0x7f0000000100), &(0x7f0000000140)=0x14) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/520], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) [ 1434.906165] binder: 17837:17842 ioctl 4018620d 20000100 returned -22 [ 1434.928975] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:33:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x40, 0x0, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000100)=ANY=[@ANYBLOB="8d57e3a6d77569bb0c7bdeb42cba16a3b6e034135e9346c1f2f5e36f22fb50a464976fd92c6e39b42e440a832fd77f0796895f820d443350cfd8485db94ade0f530a58680ce29540b9ad64263cf6e08882586fd96200e196790aca7cd059bc81080e6a81707a426db55bef8ce9c2ba8c945f451c582ee70a301340aa4f06bb7678c94cfc53efb5dc875f7ffc3b96a493", @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYPTR, @ANYRESHEX=r0, @ANYRESDEC, @ANYRES64=r0], @ANYRES64=r0], @ANYRESOCT=0x0, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES16=r1], @ANYRESOCT=r1, @ANYRES16=r1], 0x0, 0x0, 0x0}) [ 1434.951781] binder: 17837:17842 unknown command 2080272613 [ 1434.983283] binder: 17837:17842 ioctl c0306201 20000440 returned -22 [ 1434.992239] binder_alloc: allocated: 1856 (num: 210 largest: 96), free: 10432 (num: 1 largest: 10432) [ 1435.031202] binder: 17854:17859 unknown command 536871168 [ 1435.039513] binder: 17837:17862 ioctl 4018620d 20000100 returned -22 [ 1435.056397] binder: 17854:17859 ioctl c0306201 20000440 returned -22 [ 1435.071451] binder: 17837:17862 unknown command 2080272613 11:33:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'filter\x00', 0x0, 0x3, 0xffffffffffffff39, [], 0x0, &(0x7f00000000c0), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000100)=0x4) 11:33:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x8, 0x100013) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/checkreqprot\x00', 0x400100, 0x0) delete_module(&(0x7f0000000480)='keyringvboxnet0bdev\x00', 0x800) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0xb04, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000340)={@initdev, @dev}, &(0x7f0000000380)=0x8) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f00000004c0)={0x3, 'syz0\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x12, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r2], 0x0, 0x0, 0x0}) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) get_mempolicy(&(0x7f00000003c0), &(0x7f0000000400), 0x9018, &(0x7f0000ffb000/0x3000)=nil, 0x5) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) 11:33:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) msgget(0x3, 0x88) [ 1435.079800] binder: 17837:17862 ioctl c0306201 20000440 returned -22 [ 1435.088482] binder: 17854:17864 unknown command 536871168 [ 1435.098008] binder: 17854:17864 ioctl c0306201 20000440 returned -22 [ 1435.196391] binder_alloc: 25489: binder_alloc_buf size 2305843833847414784 failed, no address space [ 1435.231229] binder: 17870:17874 unknown command 808482864 11:33:21 executing program 2: sysinfo(&(0x7f00000002c0)=""/94) r0 = socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0)=0xc638, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0xfffffe7b, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) [ 1435.243021] binder_alloc: allocated: 1856 (num: 210 largest: 96), free: 10432 (num: 1 largest: 10432) [ 1435.256446] binder: 17870:17874 ioctl c0306201 20000440 returned -22 [ 1435.283229] binder: 17870:17877 unknown command 808482864 11:33:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/520], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) [ 1435.291975] binder: 17870:17877 ioctl c0306201 20000440 returned -22 [ 1435.293717] binder_alloc: 25489: binder_alloc_buf size 2305843833847414784 failed, no address space [ 1435.351459] binder: 17883:17885 unknown command 50744 [ 1435.360882] binder_alloc: allocated: 1872 (num: 212 largest: 96), free: 10416 (num: 1 largest: 10416) [ 1435.385043] binder: 17883:17885 ioctl c0306201 20000440 returned -22 [ 1435.990322] net_ratelimit: 20 callbacks suppressed [ 1435.990328] protocol 88fb is buggy, dev hsr_slave_0 [ 1436.000603] protocol 88fb is buggy, dev hsr_slave_1 [ 1436.005791] protocol 88fb is buggy, dev hsr_slave_0 [ 1436.010872] protocol 88fb is buggy, dev hsr_slave_1 [ 1436.630142] protocol 88fb is buggy, dev hsr_slave_0 [ 1436.635264] protocol 88fb is buggy, dev hsr_slave_1 [ 1437.190154] protocol 88fb is buggy, dev hsr_slave_0 [ 1437.195893] protocol 88fb is buggy, dev hsr_slave_1 [ 1437.430147] protocol 88fb is buggy, dev hsr_slave_0 [ 1437.430150] protocol 88fb is buggy, dev hsr_slave_0 11:33:23 executing program 4: stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) socket$inet_dccp(0x2, 0x6, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff, 0x8}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x201, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80) r3 = getpgrp(0xffffffffffffffff) getpriority(0x1, r3) 11:33:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00'], 0x0, 0x0, 0x0}) 11:33:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="806be2dcccc91860e5af654881fa"], 0x0, 0x0, 0x0}) 11:33:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x3, 0x80000) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f00000001c0)=0x80000000) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xb) 11:33:23 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x400c0) connect$pppoe(r1, &(0x7f0000000200)={0x18, 0x0, {0x1, @local, 'team0\x00'}}, 0x1e) connect$inet6(r0, &(0x7f0000000040), 0x1c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) wait4(r2, &(0x7f00000000c0), 0x20000000, &(0x7f0000000100)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x42102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x11, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x4000000000, 0x240240) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x10010000000034) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 11:33:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/524], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x40000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) r1 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x40, 0x181000) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000140)=[{{0x77359400}, 0x1, 0x1, 0x8}, {{r2, r3/1000+30000}, 0x4, 0x0, 0xfffffffffffff801}, {{0x0, 0x7530}, 0x7, 0x1e, 0x6}, {{0x0, 0x7530}, 0x1f, 0xffffffffffffff11, 0x800000000000}, {{0x77359400}, 0x11, 0x5329}, {{0x0, 0x2710}, 0x0, 0x5, 0xfff}, {{0x0, 0x2710}, 0x17, 0x720}], 0xa8) 11:33:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x101000) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x2, [0xd8, 0xfffffffffffffffc]}, &(0x7f00000000c0)=0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x2, 0xb, 0x3}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1437.954220] binder: 17905:17910 unknown command 64 [ 1437.966789] binder: 17909:17914 unknown command -589141120 [ 1437.977179] binder: 17905:17910 ioctl c0306201 20000440 returned -22 [ 1437.986618] binder: 17909:17914 ioctl c0306201 20000440 returned -22 11:33:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x28000, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000180)={0x4, 0x3ff, 0x3, 0x6, 0x15, 0x6, 0x0, 0x4, 0x401, 0x9}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80080, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x5, 0x12) 11:33:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0xfffffffffffffdbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:24 executing program 4: socketpair(0xa, 0xa, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x800, {0x5c7, 0x0, 0x24cedf6d, 0x7fffffff, 0x4bf, 0x8}, 0x0, 0x1f}, 0xe) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) [ 1438.116700] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1438.143506] binder_alloc: allocated: 1888 (num: 214 largest: 96), free: 10400 (num: 1 largest: 10400) 11:33:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={0x2}, &(0x7f0000000100), &(0x7f0000000180), 0x8) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000200)={0x7, 0x15, 0x2}, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 11:33:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200000, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockname$ax25(r1, &(0x7f0000000280)={{}, [@netrom, @bcast, @bcast, @bcast, @bcast, @rose, @rose]}, &(0x7f00000001c0)=0x48) sendto$inet(r2, &(0x7f0000000100)="e0f219022a6060ec2f353d616c4b4f34ee52eae21675331377dbf4b89cceeb794e20a33a5ed9ea46bd8f2000", 0x2c, 0x3ffffff, &(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10) [ 1438.270483] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1438.325170] binder_alloc: allocated: 1904 (num: 216 largest: 96), free: 10384 (num: 1 largest: 10384) [ 1438.347606] binder: 17952:17961 unknown command 8 [ 1438.365947] binder: 17952:17961 ioctl c0306201 20000440 returned -22 11:33:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f00000006c0)={'filter\x00', 0x0, 0x0, 0xff9a, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00064040"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x9, 0x101000) r2 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x8, 0x80) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000640)=r2) r3 = syz_init_net_socket$llc(0x1a, 0x1000000000000000, 0x0) getpeername(r3, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000680)=0x80) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x8040, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000540)={0x0, 0x8, 0x4, [0x20, 0x9, 0xffffffffffffff7f, 0x200]}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000005c0)={r5}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x100000001, 0x4, [0x5, 0x6, 0x2, 0xb0f]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x401}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000480)={r6, 0x0, 0x6, 0x9dce, 0x6d3, 0x20, 0xd0a, 0xff, {r7, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x100, 0x5, 0x24, 0x800, 0x8001}}, &(0x7f0000000400)=0xb0) r8 = accept4$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000280)=0x1c, 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000740)={0x8000, 0xffffffff, 0x81, 0xcf, 0xffffffff}) r9 = gettid() r10 = getpid() kcmp(r9, r10, 0x7, r4, r8) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f00000002c0)={0x1, "df9635b5f5f7b9540ebd503ff76be1a287335220f62c8855f728441f6b58de6c", 0x2}) [ 1438.380920] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1438.409018] binder_alloc: allocated: 1904 (num: 216 largest: 96), free: 10384 (num: 1 largest: 10384) 11:33:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/524], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) [ 1438.487133] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1438.522951] binder_alloc: allocated: 1904 (num: 216 largest: 96), free: 10384 (num: 1 largest: 10384) [ 1438.539600] binder: 17968:17975 unknown command 1077937664 [ 1438.600251] binder: 17968:17975 ioctl c0306201 20000440 returned -22 [ 1438.609788] binder: 17968:17981 unknown command 1077937664 [ 1438.618026] binder: 17968:17981 ioctl c0306201 20000440 returned -22 11:33:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x2, 0xb, 0x3}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x426e52d4315a0a2f, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x3}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000200), &(0x7f0000000280)=0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f00000000c0)) 11:33:26 executing program 5: getrandom(&(0x7f00000000c0)=""/56, 0x38, 0x1) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000100)=""/81) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000000a004e2000000fffff020000000000000000000000000001af0000000000000000000000000000000000004af769341053670a5e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000ae00000001000000030000000a004e24000000070000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000003da47847dbeb5acee8868f90bf7551574000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0966b815c5d36ff0000000000000000000000ecff00000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000050000000000000000000000000000000106000000000000000000000000000000000000000000000000000000000000000000000000e460f50d00"/524], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x80800) getpeername(r1, &(0x7f0000000480)=@xdp, &(0x7f0000000400)=0x80) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/enforce\x00', 0x600000, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, r2, 0x0) readahead(r0, 0x7, 0x7ff) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x82400, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@broadcast, @initdev, 0x0}, &(0x7f0000000300)=0xc) bind$packet(r4, &(0x7f0000000340)={0x11, 0x1f, r5, 0x1, 0xa286, 0x6, @local}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x81, 0x0, &(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYPTR, @ANYRES16=r3, @ANYBLOB="b6a6745c1b2bf2c37a4035ac4f2d45e25fd6ac88368abf68a91e115138d4b3fe7fd5629e6ee92804d54d32f2d12d47298a83df136754f3c19b86b01bd876d79114a6ed029d69211a0392b264b5787516df422c668aa6207bc1062003707ebe84d263876f8fe7bc97630d4797f38edcc3cd1c6c71e349a7f7e9594e8fea3f8a0d107f5bc91dbbbbe4347c7cc268006891ddbaf365a61a7b39dda2fec1d07bf7a1948d2d81df3f55c668c6fe104ffee861dea4c1e5e2ad398344604de7", @ANYRES16=r3, @ANYPTR], @ANYRES16, @ANYRESHEX=0x0, @ANYRES64=r0]], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)) [ 1440.987111] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1441.019059] binder_alloc: allocated: 1912 (num: 217 largest: 96), free: 10376 (num: 1 largest: 10376) 11:33:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4000, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x2) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x14000, 0xfff, r3}) [ 1441.042792] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1441.060775] binder_alloc: allocated: 1912 (num: 217 largest: 96), free: 10376 (num: 1 largest: 10376) 11:33:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x1, 0x400000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @local, @initdev}, &(0x7f0000000600)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000740)=0xe8) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000400)={0x3, @default, r3}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@mcast1, @in6=@local, 0x4e22, 0x2, 0x4e22, 0x1, 0xa, 0x80, 0x80, 0x4, r2, r3}, {0x400, 0xff, 0xfffffffffffffff8, 0x80000001, 0x80000000, 0x8, 0x7, 0x81}, {0x16ae, 0x7ff, 0xfffe000}, 0x3, 0x0, 0x2, 0x1, 0xecbc22cc3725dcfb, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3}, 0xa, @in=@local, 0x3506, 0x2, 0x3, 0xf018, 0x1a, 0x827, 0x1}}, 0xe8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x100, 0x1, @rand_addr="0781271ec9cfcc2f534fd80f10affe56", 0x7}}, 0x4800000000, 0x5, 0x6, 0x8, 0x2}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000380)={r4, 0xbc, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @rand_addr=0x6}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x23}, 0x5}, @in6={0xa, 0x4e24, 0xfc, @ipv4={[], [], @loopback}, 0x80}, @in6={0xa, 0x4e20, 0x7, @mcast1, 0x3}, @in6={0xa, 0x4e22, 0x1, @mcast2, 0xffffffff}, @in6={0xa, 0x4e22, 0x9dd, @local, 0x7d945a90000}]}, &(0x7f00000003c0)=0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="48d8c2136f686d556583b6e586af6856b1d6a3b2d3d7276a975fbae3130ad008a0fec40e0f0c8fbeab31bd5125"], 0x0, 0x0, 0x0}) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) 11:33:27 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x4000, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000100)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6b, 0x120000000000000, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}) [ 1441.106902] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1441.131143] binder: 18010:18014 unknown command 536871424 [ 1441.137512] binder_alloc: allocated: 1912 (num: 217 largest: 96), free: 10376 (num: 1 largest: 10376) [ 1441.150293] binder: 18010:18014 ioctl c0306201 20000440 returned -22 11:33:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x2, 0xb, 0x3}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1441.227104] binder: 18010:18014 unknown command 536871424 [ 1441.238675] binder: 18020:18027 unknown command 331536456 [ 1441.238702] binder: 18010:18014 ioctl c0306201 20000440 returned -22 11:33:27 executing program 0: r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000580)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14, 0x80800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000800)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@loopback, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000940)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006200)=[{{&(0x7f0000005880)=@can={0x1d, 0x0}, 0x80, &(0x7f0000005ec0)=[{&(0x7f0000005900)=""/172, 0xac}, {&(0x7f00000059c0)=""/209, 0xd1}, {&(0x7f0000005ac0)=""/43, 0x2b}, {&(0x7f0000005b00)=""/226, 0xe2}, {&(0x7f0000005c00)=""/231, 0xe7}, {&(0x7f0000005d00)=""/143, 0x8f}, {&(0x7f0000005dc0)=""/250, 0xfa}], 0x7, &(0x7f0000005f40)=""/131, 0x83}, 0x9}, {{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000006000)=""/36, 0x24}, {&(0x7f0000006040)=""/227, 0xe3}], 0x2, &(0x7f0000006180)=""/97, 0x61}, 0x100}], 0x2, 0x10040, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000006340)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000006440)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f00000076c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000007700)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f00000079c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000007a00)=0x14, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000007a40)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000007b40)=0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000007f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f0000007ec0)={&(0x7f0000007b80)={0x320, r1, 0x11, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x7c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xb4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xc53}}}]}}, {{0x8, 0x1, r7}, {0x178, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x6, 0x7, 0x0, 0x100000001}, {0x7, 0x85, 0x1, 0x6}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r12}}}]}}]}, 0x320}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r13 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x40, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000100)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) 11:33:27 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xa0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r1, 0x80000, r2}) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) [ 1441.282129] binder: 18020:18027 ioctl c0306201 20000440 returned -22 11:33:27 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) getsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r2, 0x1, 0xf3, 0x1174, 0xd04e, 0xfffffffffffff801}, 0x14) sendfile(r0, r0, &(0x7f00000002c0), 0x1000) pipe2(&(0x7f0000000280), 0x80000) [ 1441.349334] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1441.360377] net_ratelimit: 20 callbacks suppressed [ 1441.360475] protocol 88fb is buggy, dev hsr_slave_0 [ 1441.371365] protocol 88fb is buggy, dev hsr_slave_1 [ 1441.385808] binder_alloc: allocated: 1912 (num: 217 largest: 96), free: 10376 (num: 1 largest: 10376) 11:33:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x28000, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000180)={0x4, 0x3ff, 0x3, 0x6, 0x15, 0x6, 0x0, 0x4, 0x401, 0x9}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80080, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x5, 0x12) 11:33:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}], 0x3, 0x10001, &(0x7f0000000100)={0x5}, 0x8) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80200, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, r2, 0x108, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x40, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4998bf21}]}, @TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'hwsim0\x00'}}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x1) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x8) [ 1441.414061] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1441.421276] binder: 18020:18045 unknown command 331536456 [ 1441.442280] binder: 18020:18045 ioctl c0306201 20000440 returned -22 11:33:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/526], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000000)=0x81) r1 = dup2(r0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {&(0x7f0000000280), r2}}, 0x18) 11:33:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="e9d64040"], 0x0, 0x0, 0x0}) [ 1441.497380] binder_alloc: allocated: 1920 (num: 218 largest: 96), free: 10368 (num: 1 largest: 10368) [ 1441.536256] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:33:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x101c00, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) [ 1441.570772] binder_alloc: allocated: 1928 (num: 219 largest: 96), free: 10360 (num: 1 largest: 10360) [ 1441.590110] protocol 88fb is buggy, dev hsr_slave_0 [ 1441.590137] protocol 88fb is buggy, dev hsr_slave_1 [ 1441.595203] protocol 88fb is buggy, dev hsr_slave_1 11:33:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x2000, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:27 executing program 3: r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000580)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14, 0x80800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000800)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@loopback, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000940)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006200)=[{{&(0x7f0000005880)=@can={0x1d, 0x0}, 0x80, &(0x7f0000005ec0)=[{&(0x7f0000005900)=""/172, 0xac}, {&(0x7f00000059c0)=""/209, 0xd1}, {&(0x7f0000005ac0)=""/43, 0x2b}, {&(0x7f0000005b00)=""/226, 0xe2}, {&(0x7f0000005c00)=""/231, 0xe7}, {&(0x7f0000005d00)=""/143, 0x8f}, {&(0x7f0000005dc0)=""/250, 0xfa}], 0x7, &(0x7f0000005f40)=""/131, 0x83}, 0x9}, {{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000006000)=""/36, 0x24}, {&(0x7f0000006040)=""/227, 0xe3}], 0x2, &(0x7f0000006180)=""/97, 0x61}, 0x100}], 0x2, 0x10040, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000006340)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000006440)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f00000076c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000007700)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f00000079c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000007a00)=0x14, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000007a40)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000007b40)=0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000007f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f0000007ec0)={&(0x7f0000007b80)={0x320, r1, 0x11, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x7c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xb4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xc53}}}]}}, {{0x8, 0x1, r7}, {0x178, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x6, 0x7, 0x0, 0x100000001}, {0x7, 0x85, 0x1, 0x6}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r12}}}]}}]}, 0x320}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r13 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1441.646741] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1441.672916] binder_alloc: allocated: 1936 (num: 220 largest: 96), free: 10352 (num: 1 largest: 10352) [ 1441.696979] binder: 18072:18080 unknown command 1077991145 [ 1441.729171] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:33:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04e9c7a5c524dc866b14bd917830ddbfbf2d9e864e674cd9682627b2485b23"], 0x0, 0x0, 0x0}) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000100)) 11:33:27 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x9, 0x8}) [ 1441.744679] binder: 18072:18080 ioctl c0306201 20000440 returned -22 [ 1441.751122] binder_alloc: allocated: 1936 (num: 220 largest: 96), free: 10352 (num: 1 largest: 10352) [ 1441.752173] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1441.775391] binder_alloc: allocated: 1936 (num: 220 largest: 96), free: 10352 (num: 1 largest: 10352) 11:33:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) [ 1441.836316] binder: 18096:18099 unknown command -1513625340 [ 1441.858306] binder: 18096:18099 ioctl c0306201 20000440 returned -22 [ 1441.876692] binder: 18072:18102 unknown command 1077991145 11:33:27 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000100)={r1, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) mq_getsetattr(r0, &(0x7f0000000140)={0x2, 0x1, 0x4, 0x0, 0x1000000000000000, 0x200, 0x52a, 0x53d}, &(0x7f0000000180)) 11:33:27 executing program 3: r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000580)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14, 0x80800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000800)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@loopback, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000940)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006200)=[{{&(0x7f0000005880)=@can={0x1d, 0x0}, 0x80, &(0x7f0000005ec0)=[{&(0x7f0000005900)=""/172, 0xac}, {&(0x7f00000059c0)=""/209, 0xd1}, {&(0x7f0000005ac0)=""/43, 0x2b}, {&(0x7f0000005b00)=""/226, 0xe2}, {&(0x7f0000005c00)=""/231, 0xe7}, {&(0x7f0000005d00)=""/143, 0x8f}, {&(0x7f0000005dc0)=""/250, 0xfa}], 0x7, &(0x7f0000005f40)=""/131, 0x83}, 0x9}, {{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000006000)=""/36, 0x24}, {&(0x7f0000006040)=""/227, 0xe3}], 0x2, &(0x7f0000006180)=""/97, 0x61}, 0x100}], 0x2, 0x10040, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000006340)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000006440)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f00000076c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000007700)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f00000079c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000007a00)=0x14, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000007a40)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000007b40)=0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000007f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f0000007ec0)={&(0x7f0000007b80)={0x320, r1, 0x11, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x7c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xb4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xc53}}}]}}, {{0x8, 0x1, r7}, {0x178, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x6, 0x7, 0x0, 0x100000001}, {0x7, 0x85, 0x1, 0x6}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r12}}}]}}]}, 0x320}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r13 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1441.887567] binder: 18096:18104 ioctl 80044323 20000100 returned -22 [ 1441.906370] binder: 18072:18102 ioctl c0306201 20000440 returned -22 [ 1441.939823] binder: 18096:18099 unknown command -1513625340 [ 1441.946163] binder: 18096:18104 ioctl 80044323 20000100 returned -22 [ 1441.954078] binder: 18096:18099 ioctl c0306201 20000440 returned -22 11:33:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x2, 0x6, 0x401, 0x400, 0x81}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1441.990975] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1442.009219] binder_alloc: allocated: 1936 (num: 220 largest: 96), free: 10352 (num: 1 largest: 10352) 11:33:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/526], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x800c0, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000140)=""/23, &(0x7f0000000180)=0x17) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e53ad83"], 0x0, 0x0, 0x0}) 11:33:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000dbf6bc131634040"], 0x0, 0x0, 0x0}) 11:33:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco, &(0x7f00000001c0)=0x80, 0x80800) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000300)={r2}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) chroot(&(0x7f0000000000)='./file0\x00') r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) bind$bt_sco(r3, &(0x7f0000000280)={0x1f, {0x9, 0x4906, 0x0, 0x2, 0xf6df, 0x10000}}, 0x8) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) 11:33:27 executing program 3: r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000580)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14, 0x80800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000800)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@loopback, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000940)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006200)=[{{&(0x7f0000005880)=@can={0x1d, 0x0}, 0x80, &(0x7f0000005ec0)=[{&(0x7f0000005900)=""/172, 0xac}, {&(0x7f00000059c0)=""/209, 0xd1}, {&(0x7f0000005ac0)=""/43, 0x2b}, {&(0x7f0000005b00)=""/226, 0xe2}, {&(0x7f0000005c00)=""/231, 0xe7}, {&(0x7f0000005d00)=""/143, 0x8f}, {&(0x7f0000005dc0)=""/250, 0xfa}], 0x7, &(0x7f0000005f40)=""/131, 0x83}, 0x9}, {{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000006000)=""/36, 0x24}, {&(0x7f0000006040)=""/227, 0xe3}], 0x2, &(0x7f0000006180)=""/97, 0x61}, 0x100}], 0x2, 0x10040, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000006340)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000006440)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f00000076c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000007700)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f00000079c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000007a00)=0x14, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000007a40)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000007b40)=0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000007f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f0000007ec0)={&(0x7f0000007b80)={0x320, r1, 0x11, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x7c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xb4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xc53}}}]}}, {{0x8, 0x1, r7}, {0x178, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x6, 0x7, 0x0, 0x100000001}, {0x7, 0x85, 0x1, 0x6}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r12}}}]}}]}, 0x320}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r13 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:28 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x7, 0x81, 0x3ff, 0x8000, 0x0, 0x7, 0x80000, 0x5, 0x2, 0x1, 0x1ff, 0x0, 0x5, 0x2, 0x9c, 0x70e5, 0xf7f, 0xfffffffffffffffb, 0x2, 0x6, 0x5, 0x1, 0x1, 0x2, 0x20, 0x9, 0x2, 0x1, 0x19, 0x7, 0x8001, 0x43, 0x3ff, 0x9, 0x7, 0x9, 0x0, 0x3ff, 0x1, @perf_config_ext={0x7f, 0x81}, 0x120, 0x0, 0x4, 0x7, 0x8, 0x5980, 0x80000000}, r0, 0x6, 0xffffffffffffffff, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1442.093715] binder: 18116:18118 ioctl 401c5820 200000c0 returned -22 [ 1442.117562] binder: 18116:18118 ioctl 401c5820 200000c0 returned -22 [ 1442.187730] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1442.189294] binder: 18123:18129 unknown command -2085792914 [ 1442.211542] binder_alloc: allocated: 1944 (num: 221 largest: 96), free: 10344 (num: 1 largest: 10344) [ 1442.222243] binder: 18123:18129 ioctl c0306201 20000440 returned -22 [ 1442.231295] protocol 88fb is buggy, dev hsr_slave_0 11:33:28 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100)={r1, r2}) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) [ 1442.236412] protocol 88fb is buggy, dev hsr_slave_1 [ 1442.241574] protocol 88fb is buggy, dev hsr_slave_0 [ 1442.246735] protocol 88fb is buggy, dev hsr_slave_1 [ 1442.250835] binder: 18124:18137 unknown command 1807682816 [ 1442.261145] binder: 18124:18137 ioctl c0306201 20000440 returned -22 [ 1442.276744] binder: 18123:18129 unknown command -2085792914 11:33:28 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xdb, 0x40) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x1}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340f863bf3f582cc6fd53"], 0x0, 0x0, 0x0}) 11:33:28 executing program 3: sysinfo(&(0x7f00000002c0)=""/94) r0 = socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0)=0xc638, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0xfffffe7b, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) [ 1442.298663] binder: 18123:18129 ioctl c0306201 20000440 returned -22 11:33:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200, 0x0) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000100)={0x200000000000000, "d4ba17355394a6c105cb2b957d01a5805f21f0e3da047b6f1b528c1017ce22c2", 0x4, 0x48, 0x8, 0xfffffffffffffffe, 0x0, 0x1, 0x1, 0x3f}) 11:33:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/capi/capi20\x00', 0x2042, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open_by_handle_at(r0, &(0x7f0000000080)={0xdc, 0x7ff, "c7f88bc71bf5e639905daddc8e0662b9f238859b2724b05259de7cce5db2bc78a7723c1c152765558a98fa9f363780f26551d91b6b3c84ec1c1494d8a252c0935513205f3bc0a5d41b8d291570d87f38960370eea7b03b108ac738950c383d7bd1302ee48506600cadfa0699dbc7fe29d37f8bc49549fdf07920996bdedaf14bfddb7411e98b37fb5b0b7cbf6f4945fb1f9bbd5962e7c3aa0a8b8f1852d41485cda6efb33a8899e9c9c395d60c8e85db4b29349a6c66e477b6357c7b806769390de635d483ee5cf56154e93320b00b7bc9b26283"}, 0x20402) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0xffffffff, 0x0, 0xffffffff}) [ 1442.382805] binder: 18150:18153 unknown command -129998080 [ 1442.395137] binder: 18150:18153 ioctl c0306201 20000440 returned -22 [ 1442.416555] binder: 18150:18158 unknown command -129998080 [ 1442.425453] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1442.435791] binder: 18150:18158 ioctl c0306201 20000440 returned -22 [ 1442.457158] binder: 18152:18157 unknown command 50744 [ 1442.468956] binder_alloc: allocated: 1944 (num: 221 largest: 96), free: 10344 (num: 1 largest: 10344) [ 1442.471477] binder: 18152:18157 ioctl c0306201 20000440 returned -22 [ 1442.505502] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1442.521851] binder_alloc: allocated: 1944 (num: 221 largest: 96), free: 10344 (num: 1 largest: 10344) 11:33:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/526], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400000, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x20) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam\x00\x00\x10\x00', 0x2}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffde0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x3f, 0x1) r5 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x3, 0x2000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000000200)={'filter\x00', 0x0, 0xfffffdfffffffffc, 0x0, [], 0xffffffffffffd20, &(0x7f00000000c0), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fdeec808216da768e5e88e9ae4b02a7c058f4162433aaf3d8f78fc6f5da872c04ed911b538266f1bc509ce3eaebd4b73a5b9c5f159ff59d8125c008000000000000000"], 0x0, 0x0, 0x0}) 11:33:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00407b11cd50c3f258a0af0020"], 0x0, 0x0, 0x0}) 11:33:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f00000000c0)={0x101, "dce3e802a4ae51e4fbd87bbcd7a59929d7477929606fe5ab90e60f5116534445", 0x1, 0x1}) 11:33:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/capi/capi20\x00', 0x2042, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open_by_handle_at(r0, &(0x7f0000000080)={0xdc, 0x7ff, "c7f88bc71bf5e639905daddc8e0662b9f238859b2724b05259de7cce5db2bc78a7723c1c152765558a98fa9f363780f26551d91b6b3c84ec1c1494d8a252c0935513205f3bc0a5d41b8d291570d87f38960370eea7b03b108ac738950c383d7bd1302ee48506600cadfa0699dbc7fe29d37f8bc49549fdf07920996bdedaf14bfddb7411e98b37fb5b0b7cbf6f4945fb1f9bbd5962e7c3aa0a8b8f1852d41485cda6efb33a8899e9c9c395d60c8e85db4b29349a6c66e477b6357c7b806769390de635d483ee5cf56154e93320b00b7bc9b26283"}, 0x20402) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0xffffffff, 0x0, 0xffffffff}) [ 1442.549708] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1442.566966] binder_alloc: allocated: 1944 (num: 221 largest: 96), free: 10344 (num: 1 largest: 10344) 11:33:28 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x420000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @broadcast}, &(0x7f00000000c0)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={@empty, 0x39, r1}) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x200000000011, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) getuid() [ 1442.655480] binder: 18174:18180 unknown command 293289984 [ 1442.666739] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1442.694123] binder: 18174:18180 ioctl c0306201 20000440 returned -22 [ 1442.694238] binder_alloc: allocated: 1944 (num: 221 largest: 96), free: 10344 (num: 1 largest: 10344) [ 1442.703538] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:33:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x40000) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f00000000c0)="d7105cb402920b91fa19eac9b2ca3bbaed1a5bcccd4ad93094bd61d51d89bfc0216e4a5853485b73d9215962585b48898ab0fc0790d6d5a8fdf05771f869824ba6b9bf3b105fe14d8bd7e8814a8871a1ae61d9416bc2947d8817323132116a7a090de2678b2252729860beb5fa283a2fbf35fed76a086fc03cdf5b30f148bcab2342570b274c437b9ac884ddcd99b75f4c378e6dd46cfffdd29be22da60b08d5d8b2f244313bf28ccbef6fe65b19b0cae7c34da98bc671803c334e936d38ff0868be6610e49717f6ba15", 0xca) ioctl$NBD_CLEAR_QUE(r1, 0xab05) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000180), 0x0}, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000140)=0x1) [ 1442.761639] kvm [18184]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000004 data 0x4d00000000f [ 1442.772826] binder_alloc: allocated: 1944 (num: 221 largest: 96), free: 10344 (num: 1 largest: 10344) [ 1442.783007] kvm [18184]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000004 data 0x4d00000000f [ 1442.822803] binder: 18174:18199 unknown command 293289984 [ 1442.853082] binder: 18174:18199 ioctl c0306201 20000440 returned -22 11:33:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x301800, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)=0x0) migrate_pages(r2, 0x5, &(0x7f0000000140)=0x3, &(0x7f0000000180)=0x101) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x410120}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x40) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) [ 1442.870107] protocol 88fb is buggy, dev hsr_slave_0 [ 1442.888605] binder: 18205:18207 unknown command 0 11:33:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040b382e917340a07bef8fdaaa04ba809b8ee8bdac588bdd8987a5a115fbb23d707114caffc030c8bc199d4d72901aa03b180e32673cf23a4520bd6eae942edcfa03cd154dbf0a048c969672e4b5a6aecb496fb3fbf3627366d5f57b50507c2b62bcdf5f52cfe"], 0x0, 0x0, 0x0}) [ 1442.933473] binder: 18205:18207 ioctl c0306201 20000440 returned -22 [ 1442.970945] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1442.991498] binder_alloc: allocated: 1944 (num: 221 largest: 96), free: 10344 (num: 1 largest: 10344) [ 1443.009024] binder: 18205:18207 unknown command 0 [ 1443.017177] binder: 18205:18207 ioctl c0306201 20000440 returned -22 [ 1443.044381] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1443.073585] binder_alloc: allocated: 1944 (num: 221 largest: 96), free: 10344 (num: 1 largest: 10344) 11:33:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/527], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1000, 0x2) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xd0000, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000040)=[0x0, 0xe1]) 11:33:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffffffffffffe4d, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) pkey_alloc(0x0, 0x2) 11:33:29 executing program 2: syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x4610, 0x88000) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES16=r0]], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x2, 0x2000) write$FUSE_WRITE(r1, &(0x7f0000000100)={0x18, 0x0, 0x1, {0x8}}, 0x18) 11:33:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x2, {{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0xc}, 0x6}}}, 0x88) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0}) 11:33:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x5, 0x4080) recvfrom$rxrpc(r1, &(0x7f00000001c0)=""/49, 0x31, 0x101, &(0x7f0000000280)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffffffffffffe80, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r2, @ANYRES16=r2, @ANYRESDEC=r0, @ANYRESHEX, @ANYRESHEX=r0, @ANYRES32=r2, @ANYRESOCT=r2], @ANYRES64=r0, @ANYBLOB="53dbb4cfdd94f219e30aab7120d26e9521d51384aeb0f6edfec8622136044b1705438859ce80ec0ee325"], 0xfdf6, 0x0, 0x0}) 11:33:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x10000) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) r1 = dup(r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0x58e, 0x4) [ 1443.212951] binder: 18230:18235 unknown command 536871296 [ 1443.222720] binder: 18232:18236 unknown command 3 [ 1443.233791] binder: 18230:18235 ioctl c0306201 20000140 returned -22 [ 1443.245482] binder: 18232:18236 ioctl c0306201 20000440 returned -22 11:33:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffc}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x80, 0x0) bind$netrom(r1, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) 11:33:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000100)='broute\x00', 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x6, 0x402) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='@c@@'], 0x0, 0x0, 0x0}) 11:33:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r2 = fcntl$dupfd(r0, 0x406, r1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r3, 0x80000000, 0x10}, &(0x7f00000001c0)=0xc) [ 1443.296555] binder: 18241:18249 ioctl c0306201 20000440 returned -14 11:33:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000100)={0x7, 0x7f, 0x2}, 0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = getpid() r3 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x0, 0x2) migrate_pages(r2, 0xbbb, &(0x7f0000000280)=0x1f, &(0x7f00000002c0)=0x8) read$eventfd(r3, &(0x7f0000000400), 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$FICLONE(r3, 0x40049409, r0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000140)={0xb3c9, 0x2, 0x7dc, 0x2, 0xb, 0x5, 0xffffffffffffff80, 0x1, 0x0, 0x4}) write$P9_RREADLINK(r3, &(0x7f0000000640)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) getsockname$unix(r3, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e) [ 1443.417728] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1443.443572] binder: 18260:18266 unknown command 1077961536 [ 1443.465519] binder: 18260:18266 ioctl c0306201 20000440 returned -22 [ 1443.477752] binder_alloc: allocated: 1944 (num: 221 largest: 96), free: 10344 (num: 1 largest: 10344) [ 1443.508099] binder: 18267:18272 unknown command 1843563807 [ 1443.514754] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1443.519156] binder: 18267:18272 ioctl c0306201 20000440 returned -22 [ 1443.540291] binder_alloc: allocated: 1944 (num: 221 largest: 96), free: 10344 (num: 1 largest: 10344) 11:33:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000000a004e2000000fffff020000000000000000000000000001af0000000000000000000000000000000000004af769341053670a5e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000ae00000001000000030000000a004e24000000070000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000003da47847dbeb5acee8868f90bf7551574000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0966b815c5d36ff0000000000000000000000ecff00000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000050000000000000000000000000000000106000000000000000000000000000000000000000000000000000000000000000000000000e460f50d00"/527], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x9, 0x8000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)={&(0x7f0000000180)='./file0\x00', r1}, 0x10) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x2, 0x15, 0x80000001, 0x9, 0x45, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_key={0xe, 0x8, 0x308, 0x0, "1e4a66d290589295c5ec540188db5ac8e8236bd63e9c6da813ba4c3f4b173b7c647b74962fe3cb8cf2c69f759bc036f2f54294cf48be209bcb8f72793a82c3c609f8cd0bcdc2cb9655804ae0c1b25e768421be3fd11c5ad34377e9ba23729236a5"}, @sadb_x_filter={0x5, 0x1a, @in=@local, @in=@empty, 0x0, 0x10}, @sadb_key={0x1e, 0x8, 0x738, 0x0, "4dafe2b9c9d85057f702e60ade0a590e00a231b3125e09e268102d62eff758c07e78304bc17be6a2ddec6ee117f530c3a142c345aeacecc20abdf9445722522a05e164983e512ade7f0826739d04fc8cf5965d174062f62ef8c880532a90a4c87fe558c9de0ef54deb60cba3b74e5452284ceea77b1d96e4cdfcd3ff321b27b9a634beb791043d5d41edbc9ad0af11a7c78e02d922fab76b903526d5ed6e0b259b2f7c7e07da24a2c5adafa4d9c4b39fa8039bf46d2539f4e2137b3c9aa3ab048f3b8192f98956a068b62b1ef4cad9b4f417c10da4df091ed7bcf19de1241d8d4fa9f517a6e331"}, @sadb_sa={0x2, 0x1, 0x4d4, 0x5, 0x3, 0xad, 0x0, 0x60000000}, @sadb_key={0x9, 0x9, 0x1c8, 0x0, "1b1ec785768e8bbf42f03f3db11d9c7cf4df6a666f4555b21e04dbe3a7d2c4e3e521b20228a86e86a37c37c6b016db9047368e559f031360a4"}, @sadb_address={0x5, 0x17, 0xff, 0x80, 0x0, @in6={0xa, 0x4e22, 0x51, @remote, 0x1}}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d3}]}, 0x228}}, 0x4000000) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r2 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x3, 0x20000) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000300)=0x4, 0x4) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000280)=""/47) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x2100, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x80, 0x200000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 11:33:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001900)={'broute\x00', 0x0, 0x4, 0xce, [], 0x1, &(0x7f00000017c0)=[{}], &(0x7f0000001800)=""/206}, &(0x7f0000001980)=0x78) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 11:33:29 executing program 4: ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x4, 0x100000001}) 11:33:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ipx\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000004cc0)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x3f, 0x2) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000100)={{0x2, 0x4e20, @multicast2}, {0x7, @random="76e25803f333"}, 0x8, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'bridge_slave_1\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000200)=0x3) 11:33:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3, 0xffdffffffffffffc) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000100)={0x1, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xf73d}}}, 0x88) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0)=0x0) syz_open_procfs$namespace(r2, &(0x7f0000000300)='ns/cgroup\x00') r3 = getegid() ioctl$TUNSETGROUP(r1, 0x400454ce, r3) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000100)=""/219, &(0x7f0000000280)=0xdb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00Z@@'], 0x0, 0x0, 0x0}) 11:33:29 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) [ 1443.693726] binder: 18282:18287 ioctl 6609 0 returned -22 11:33:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="4b0d7ce8"], 0x0, 0x0, 0x0}) [ 1443.776344] binder: 18282:18305 ioctl 6609 0 returned -22 [ 1443.783503] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1443.808499] binder_alloc: allocated: 1968 (num: 224 largest: 96), free: 10320 (num: 1 largest: 10320) 11:33:29 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) 11:33:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x10000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x10) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) [ 1443.837404] binder: 18307:18311 unknown command 1077959168 [ 1443.845793] binder: 18307:18311 ioctl c0306201 20000440 returned -22 [ 1443.888677] binder: 18307:18315 unknown command 1077959168 [ 1443.915320] binder: 18316:18320 unknown command -394523317 [ 1443.920821] binder: 18307:18315 ioctl c0306201 20000440 returned -22 [ 1443.945797] binder: 18316:18320 ioctl c0306201 20000440 returned -22 11:33:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) mount$9p_rdma(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x10000, &(0x7f0000000180)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@sq={'sq', 0x3d, 0x1f}}, {@common=@version_u='version=9p2000.u'}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/cec#\x00'}}, {@dont_appraise='dont_appraise'}, {@dont_appraise='dont_appraise'}, {@subj_type={'subj_type', 0x3d, '/dev/cec#\x00'}}, {@audit='audit'}, {@obj_role={'obj_role'}}]}}) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001280)='/proc/capi/capi20\x00', 0x202, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000012c0)={0x4e9, 0x48, "fd3f58ec021fc0e5230c4cac5ab50e5ab59d5425d586395a6dd18fe9e7aa18421470e76cbde0d5ed1a6861f5226cfb915d1f4abb70bc01e98a6d60c2b9aa22ffd3b0dd4a8ce74290"}) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000080)={0x7, 0xaeb, &(0x7f0000000040)="f7d8b5f3521b18484dae", &(0x7f0000000280)="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", 0xffffffffffffffbf, 0x1000}) syz_open_dev$vivid(&(0x7f0000001340)='/dev/video#\x00', 0x2, 0x2) 11:33:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="001e12cc38f735825ddc881dabbd5c474962ceeda105620c2f22104f64bc9824c417b013b3b99e24c7364fad7506f447b1b9130da2abd22c38d6ad3842955f67ec18227b1d165a042c49e386b15bbde3418bc5170f0233c7864061c018b074ab8a39185f2dc344ba8d8dcb68ba5b2febd7fcfd8e54bece376366306990bd1da1c13203ec43c29a966c7a51409322eb96da85d72500"/161], 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L+', 0x44}, 0x28, 0x2) 11:33:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000000a004e2000000fffff020000000000000000000000000001af0000000000000000000000000000000000004af769341053670a5e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000ae00000001000000030000000a004e24000000070000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000003da47847dbeb5acee8868f90bf7551574000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0966b815c5d36ff0000000000000000000000ecff00000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000050000000000000000000000000000000106000000000000000000000000000000000000000000000000000000000000000000000000e460f50d00"/527], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 11:33:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x1e, "e2f007bd6a74ee211fe7c64ef4b50d25c9b09d14a8e0f15784b141093800"}, &(0x7f0000000100)=0x26) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2, 0x81}, &(0x7f0000000180)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340404a8c125eacbe9e755a715a18684b872dbdfebe5989ba1b34fa4b34aca4cc3b0cbc9aa856a1e595344029b9250c84859782cee2e20e0668cebc6ce8f276d3772bb358a826335bb5570d08806eb008c406f239c8537216caef41fc633479de06a3610f4cd63ff2d9180a4c90aa0f312b19fa76f3cb527646cfbf59ca678d6c3794c6ea9421c4e695935c5bde02f71764ba6c572cd5f7790553e3dfc840ab128a76bacbe5"], 0x0, 0x0, 0x0}) 11:33:29 executing program 2: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000100)={0x8, @dev={[], 0x2a}}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000140)) 11:33:29 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000180)=0xdc) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r1, 0x100000000, 0xffffffff80000000}, &(0x7f0000000200)=0x8) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0xdad0, 0xffffffff}) 11:33:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='selinuxuser{\'\x00') ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 11:33:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) prctl$PR_SET_SECUREBITS(0x1c, 0x3) [ 1444.115456] binder: 18331:18340 unknown command -871227904 11:33:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x20) bind$isdn_base(r1, &(0x7f0000000040)={0x22, 0x400, 0x0, 0x5, 0x48b}, 0x6) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 1444.175458] binder: 18331:18340 ioctl c0306201 20000440 returned -22 [ 1444.212297] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:33:30 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0xffffffff, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, [], 0xb}, 0x6}], 0x1c) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) [ 1444.228677] binder: 18331:18349 unknown command -871227904 [ 1444.242898] binder: 18331:18349 ioctl c0306201 20000440 returned -22 [ 1444.252694] binder_alloc: allocated: 1984 (num: 226 largest: 96), free: 10304 (num: 1 largest: 10304) 11:33:30 executing program 5: socket(0x4, 0x1, 0x5) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000e3ff0000"], 0x0, 0x0, 0x0}) 11:33:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x100609c, 0x0) lseek(r0, 0x0, 0x7) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) [ 1444.308465] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1444.338339] binder_alloc: allocated: 1984 (num: 226 largest: 96), free: 10304 (num: 1 largest: 10304) 11:33:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffc) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0) connect$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x1, 0x1, 0x7, 0x100000000, 0x100000000, "5b8a1364c24d11209523c59e896e61cf60dcd101b4df90495d2c5893dc4214bf3ed02421b9b4ad8c6557caba812a43d692036aa22f9cf8e24002022a6f9756", 0x1b}, 0x60) [ 1444.377204] binder: BINDER_SET_CONTEXT_MGR already set [ 1444.408071] binder: 18364:18375 ioctl 40046207 0 returned -16 [ 1444.463530] binder: 18377:18381 unknown command -486539264 [ 1444.469529] binder: 18377:18381 ioctl c0306201 20000440 returned -22 11:33:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000000a004e2000000fffff020000000000000000000000000001af0000000000000000000000000000000000004af769341053670a5e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000ae00000001000000030000000a004e24000000070000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000003da47847dbeb5acee8868f90bf7551574000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0966b815c5d36ff0000000000000000000000ecff00000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000050000000000000000000000000000000106000000000000000000000000000000000000000000000000000000000000000000000000e460f50d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x210) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 11:33:30 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400, 0x0) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000040)={0x440d, 0x8000, 0xfb5, 0x40}) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) 11:33:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xffffffff, 0x8000) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000100)=0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000005c31e306d158cb8ef820012e0dcf5849647aa90657c56547fbf76b0745e402f42cf8652a29d3f373e469812febe0659549137dc25621b10df4657b43283458598d37447c42b6dbfd8830bfe105da7a1c7298ef7dd0f057b14c3d0e9da5fd624ff5e74244c01d50d057ad2d187fd1a7bf1beff4b47574b96f9ea16536acfbe36aa1547db582be21e17e5b0a79c97f92450ec8aa0ed94fa59d6377bc904b32ba2b8d90825ce20c70a60854af0c542bb045ff008658955990c0853c9f816405540c9eecab03ea5469d5e3"], 0x0, 0x0, 0x0}) 11:33:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1ff, 0x400200) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000040)='syz1\x00') ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000047bf28955780b14eb9b0cfd23e4a533df6b5f124f89c9b7c2b219fd3b34da5de611f606a4e309fa1dc8589ced9679450b17604a5dd7d02e4db4cc04f79fec36716fb401fad10b4ecc33456cf4ea313cd297f"], 0x0, 0x0, 0x0}) [ 1444.545061] binder: 18377:18389 unknown command -486539264 [ 1444.558170] binder: 18377:18389 ioctl c0306201 20000440 returned -22 11:33:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0xc400, 0x2) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000100)={0x7}, 0x1) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000001c0)=0x6, 0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) [ 1444.588423] binder: 18396:18402 unknown command 0 [ 1444.602153] binder: 18399:18401 unknown command 0 [ 1444.615600] binder: 18396:18402 ioctl c0306201 20000440 returned -22 [ 1444.623575] binder: 18399:18401 ioctl c0306201 20000440 returned -22 [ 1444.628760] binder: 18396:18410 unknown command 0 11:33:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x9, 0x800) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) 11:33:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x20000, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x70, 0x6, 0x8, 0x6, 0x4, 0x0, 0x2, 0x9050, 0x8, 0x7fff, 0x5, 0x9, 0x7, 0x8, 0x6, 0x26e2b745, 0xbf06, 0x52, 0x7ff, 0xffffffffffffffff, 0x47, 0x1, 0x80000000, 0xfffffffffffffff7, 0xbec, 0x1000000020, 0x3, 0x8000, 0xfffffffffffffffa, 0x2, 0x8, 0x5778, 0x0, 0x5, 0xc8, 0xfffffffffffff23d, 0xfffffffffffff9e4, 0x0, 0x3, 0x0, @perf_config_ext={0x118e, 0x2}, 0x400, 0x101, 0x80, 0x0, 0x9, 0x10000, 0x9}, r2, 0x8, r1, 0x2) [ 1444.660643] binder: 18396:18410 ioctl c0306201 20000440 returned -22 11:33:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x9, 0x4, 0x2, 0x6, 0x6, 0x40, 0x4, 0x0, 0xfffffffffffffffe, 0xa940, 0x2, 0x8, 0x2, 0x7fff]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r2, 0x4) listen(r1, 0xd2) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffffeaf, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8001, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) readv(r1, &(0x7f00000008c0)=[{&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000000140)=""/111, 0xffffffffffffff97}, {&(0x7f0000000280)=""/175, 0xaf}, {&(0x7f0000000980)=""/201, 0xc9}, {&(0x7f00000001c0)=""/119, 0x77}, {&(0x7f0000000440)=""/216, 0xd8}, {&(0x7f0000000540)=""/235, 0xeb}, {&(0x7f0000000800)=""/120, 0x78}, {&(0x7f0000000880)=""/64, 0x14e}], 0x9) [ 1444.815210] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1444.863753] binder_alloc: allocated: 2032 (num: 232 largest: 96), free: 10256 (num: 1 largest: 10256) [ 1444.898837] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1444.913390] binder_alloc: allocated: 2032 (num: 232 largest: 96), free: 10256 (num: 1 largest: 10256) 11:33:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000000a004e2000000fffff020000000000000000000000000001af0000000000000000000000000000000000004af769341053670a5e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000ae00000001000000030000000a004e24000000070000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000003da47847dbeb5acee8868f90bf7551574000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0966b815c5d36ff0000000000000000000000ecff00000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000050000000000000000000000000000000106000000000000000000000000000000000000000000000000000000000000000000000000e460f50d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x210) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 11:33:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 11:33:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) pipe(&(0x7f0000000000)) 11:33:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x80800) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x44) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x4440, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x80000, 0x0) 11:33:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="f3c429df10c6d0e6f9ebb813bcfbaf44a1ca9bc0fc7edfd6b8bd84a562018607dbbe31cad594e4a83d45404a7d1cbfe553f112b190a9744ecf480cf9d47212e6acada67c4a3992ef7c9452de910d50693b33ca5607d995d688b2eb4c5e281c160c64e905e660cbb93a47298112ac22b89686c63ce554b88e1e081b004ee542b400000000000000"], 0x0, 0x0, 0x0}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000100)={0x9, 0xa6, 0x2}) 11:33:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x2, 0x0, 0xffffffff}) [ 1445.030701] binder: 18446:18454 unknown command 0 [ 1445.036526] binder: 18450:18456 unknown command -550910733 [ 1445.042776] binder: 18446:18454 ioctl c0306201 20000440 returned -22 [ 1445.053508] binder: 18450:18456 ioctl c0306201 20000440 returned -22 [ 1445.064036] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:33:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) 11:33:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="006340408395cf96246ec35a31d8ff7b82f2793ca06cc4dc2a382060db5c0694958f00000000000000063930f7c5e1339a0419fb7581b1e4faca1a008ef07b25d1f5aedd26c7634af0f6babf8ce52d77a3c26bc3fa958713fa8c6235e6d160ba0322b81d6c2e1c41cac00000000000000000314479d5"], 0x0, 0x0, 0x0}) [ 1445.078435] binder: 18450:18456 unknown command -550910733 [ 1445.091813] binder: 18450:18456 ioctl c0306201 20000440 returned -22 [ 1445.105571] binder_alloc: allocated: 2032 (num: 232 largest: 96), free: 10256 (num: 1 largest: 10256) [ 1445.107287] binder: 18446:18466 unknown command 0 11:33:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x80092d8, 0x200) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2b, r2}) [ 1445.165455] binder: 18446:18466 ioctl c0306201 20000440 returned -22 11:33:31 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x200800, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000100)="6e71b6ff5c0ec57800a2519348a85a9d370193d50fec5cbb70583d05b6a0de4fb2357800f6e82769cfad554774dd7556f79d69a6897f04d49b2f6154d6f257f87215e0a3714ab2a72ade353214de72691a178654053d222c505aaa2dc6952541b608a5cb0720fcc702ddc81c8a2bb4531082776b8f4123b89ab0f28f3012fabe9e5f51fb7978bc640deebf37ed3418d87dff37df7db75abcfce74d2a2e33ba9606a3d1787374343b27372af5b9aa7d7fe8c83feeb0fdfb94e333faef3d11b8277c4431be44720418d9af933cd1be7cc26c6e02a4e245fd3036d41c37ca0b22d305a636fdffb35b0cdd81862487b2d7624609e44ff7c0592c2d98c0730bbd6404") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x8000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0063fe40"], 0x0, 0x0, 0x0}) 11:33:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x10000, 0x0) name_to_handle_at(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x51, 0x6, "5ca5af9710bb75ae3475e0781f5659103374b4ab004f9ec041bb80e162e0095f970aada5c13e38e99183be6c9b6ce8f2d32096ba6b2e7688d03820df984446b39f9d4024a9bf396c61"}, &(0x7f00000001c0), 0x1400) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000200)={0x6, 0x7, 0x4, 0x7f, 'syz1\x00', 0xf8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 1445.315468] binder: 18488:18494 unknown command -1342978027 [ 1445.322986] binder: 18493:18495 unknown command 1090413312 [ 1445.336876] binder: 18493:18495 ioctl c0306201 20000440 returned -22 [ 1445.346168] binder: 18488:18494 ioctl c0306201 20000440 returned -22 11:33:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x210) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 11:33:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) fcntl$setlease(r0, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1f, 0x8, 0x7, 0x7f, 0x80, 0x1, 0x401, [], 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x3c) read(r0, &(0x7f0000000000)=""/131, 0x83) 11:33:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0xffffffff, 0x400) sendto$inet(r1, &(0x7f0000000280)="a2389744cf3c6a6dac49f7c9f82aa3d8f7d3309bcbea4210fbb1a7859148ebddfbb16b67b2928e66c5779b30cbe4fa1b1d6d40e07fed7de092676de7f43e600d9038e1ab61a5d0f301f04b8947b54320f3e5dfa118f1f6b76618f287497aa0a5744d3bb59033b05387f1d279c3ae686a722300707fd65e1c1ce10482ba47487a6697074ef5", 0xf, 0x4004000, &(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x10001}, 0x10) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x400, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000340)={'U+', 0x5}, 0x28, 0x3) 11:33:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x10000, 0x100000000, 0xe231, 0x3a, 0x0, 0x7fffffff, 0x40001, 0x3, 0x7, 0x1, 0xbaf, 0x6, 0x697, 0x3, 0x6, 0x800, 0x100000001, 0x9, 0xd8f, 0x100, 0x9, 0x10001, 0x8, 0x3, 0x8, 0x9, 0x0, 0x19ec, 0xff, 0xfffffffffffffff9, 0x8, 0x0, 0x9, 0x7, 0x1f, 0x7, 0x0, 0x3ff, 0x0, @perf_config_ext={0x1}, 0xabc0cf238bf2a5b, 0x9, 0x9, 0x6, 0x2, 0x5, 0x5}, 0x0, 0x2, r1, 0x2) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r2, 0x0, 0x1e, &(0x7f0000000100)='ppp0vmnet0wlan1md5sumvboxnet0\x00'}, 0x30) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x2, 0x40, 0x40, 0x4}, {0x8000, 0xff, 0x81, 0x8}, {0x1, 0x3, 0x8, 0x81}, {0x9, 0x8, 0x4, 0x80000001}, {0x0, 0x69f, 0x0, 0xffff}, {0x1, 0xfffffffffffffffa, 0x80000000, 0x5}, {0x3, 0x81, 0x1, 0x8000}, {0x20, 0x2, 0x4, 0x7}]}, 0x10) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000180)={0x40, 0x5, 0x7f, 0x40, 0x7, 0x81}) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0xa, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100008000000000, 0x0, 0xffffffffffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="4d259ea80f22e85d8fe7c37b2d6c63e21e41e198044b"], 0x0, 0x0, 0x0}) 11:33:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000002c0)={0xed, "8d317856959aef1756ee75b2979fd8f892afe785f566c26ad1532a3543228173", 0x1, 0xaaaebd2478ab64ca, 0x6, 0x18e6, 0x10, 0x2, 0x3, 0x40}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000180)=@generic={0x3, 0x7, 0x5ec1a738}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="76cb16a68c6ef35c319858721242e3b91562df8e65b215358a48c93fa81b33a70f9e026e418b23000000000000"], 0x0, 0x0, 0x0}) [ 1445.369839] binder: 18493:18497 unknown command 1090413312 [ 1445.378590] binder: 18493:18497 ioctl c0306201 20000440 returned -22 [ 1445.477003] binder: 18501:18510 unknown command -1 [ 1445.485782] binder: 18502:18511 unknown command -1466030771 [ 1445.497605] QAT: Invalid ioctl [ 1445.502858] binder: 18501:18510 ioctl c0306201 20000440 returned -22 11:33:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) 11:33:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x800) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000140)=""/17) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000180)={0xfffffffffffffffc, 0x4}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x897d, &(0x7f00000000c0)={'bpq0\x00', @ifru_mtu=0x4c150029}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x80000001, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0xbb3d, 0x200, 0x7, 0xd586, 0x80000001, 0xc7a, 0x4, 0x8, 0x7, 0xd0c, 0x6, 0x7}, {0x1, 0x6, 0x3, 0x32f7, 0x82, 0x2f8e, 0x40, 0x0, 0x7, 0x2, 0x5, 0x4, 0x9}, {0x1, 0x7d8, 0x4, 0x8, 0x5, 0x5, 0x7, 0x6, 0x1, 0x4, 0x3, 0x2, 0x3}], 0xffffffffffffa264}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r2, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xbdf}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1f}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7b}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x84}, 0x1, 0x0, 0x0, 0x40014}, 0x24000000) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1445.522927] binder: 18502:18511 ioctl c0306201 20000440 returned -22 [ 1445.532315] binder: 18505:18514 unknown command -1508455562 [ 1445.540916] binder: 18501:18517 unknown command -1 [ 1445.551802] binder: 18501:18517 ioctl c0306201 20000440 returned -22 [ 1445.561428] binder: 18505:18514 ioctl c0306201 20000440 returned -22 [ 1445.620919] QAT: Invalid ioctl 11:33:31 executing program 4: socketpair(0xb, 0x0, 0xc7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0xffffffff}) fstat(r1, &(0x7f0000000080)) 11:33:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xd730, 0x400000) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000100)={0x6, 0x100000001, 0x5}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1445.654503] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1445.665988] binder_alloc: allocated: 2032 (num: 232 largest: 96), free: 10256 (num: 1 largest: 10256) 11:33:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1445.733265] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1445.761129] binder_alloc: allocated: 2040 (num: 233 largest: 96), free: 10248 (num: 1 largest: 10248) 11:33:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x10000, 0x0) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000100)) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x272, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) [ 1445.867806] binder: 18550:18553 unknown command 0 [ 1445.875298] binder: 18550:18553 ioctl c0306201 20000440 returned -22 11:33:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', r1}, 0x10) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xb16, 0x200000) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x7) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000140)=0x2, 0x4) 11:33:32 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x2) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000100)={0xffffffff, 0x0, 0x3, 0xfffffffffffffffe}) 11:33:32 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dsp\x00', 0x20200, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000400)={0x1, [0x0]}) creat(&(0x7f0000000500)='./file0\x00', 0xc) poll(&(0x7f00000000c0)=[{r0, 0x2000}], 0x1, 0xb0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x3fd, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @local}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={r3, 0xfff}, &(0x7f0000000380)=0x8) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000004c0)=@add_del={0x2, &(0x7f0000000480)='bond_slave_0\x00'}) r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b30fe5e8f3d0bc98a843b838ed909853e75683a4107d99732f0d639ad7bf9fb7065f19902aadbb2b6187fc4c6c0f34de95403804a6bb5ebe70d562f0c15474821fef6fd116f67b108009169d41676310af03f5c8e568c26137b9f7df18da050474a63797ce731aed1bfd63f2fcaaf29c6cda6c1089a33bc3894d62c37"], 0x0, 0x0, 0x0}) 11:33:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000100)=""/228) 11:33:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x800) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000140)=""/17) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000180)={0xfffffffffffffffc, 0x4}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x897d, &(0x7f00000000c0)={'bpq0\x00', @ifru_mtu=0x4c150029}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 11:33:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:32 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) [ 1446.353769] binder: 18562:18570 unknown command 31744 [ 1446.363665] binder: 18559:18567 unknown command 1593716747 [ 1446.374632] binder: 18562:18570 ioctl c0306201 20000440 returned -22 [ 1446.378780] binder: 18559:18567 ioctl c0306201 20000440 returned -22 [ 1446.390252] net_ratelimit: 18 callbacks suppressed [ 1446.390267] protocol 88fb is buggy, dev hsr_slave_0 11:33:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x40040, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1, 0x2}}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1446.402016] protocol 88fb is buggy, dev hsr_slave_1 [ 1446.408286] protocol 88fb is buggy, dev hsr_slave_0 [ 1446.414682] protocol 88fb is buggy, dev hsr_slave_1 11:33:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x10000, 0x0) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000100)) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x272, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) 11:33:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f00000002c0)={0xc50b, 0x100000000, 0x3f, 0x2, 0x1, 0xa45}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x1d, r2, 0x1, 0x5, 0x6, @local}, 0x14) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x40, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x200, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280)={0x5, 0x4, 0x7f, 0xffffffffffffffff, 0x2}, 0x14) [ 1446.452805] binder: 18559:18579 unknown command 1593716747 [ 1446.490879] binder: 18559:18579 ioctl c0306201 20000440 returned -22 11:33:32 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x8) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={&(0x7f0000bfd000/0x400000)=nil, 0x1, 0x0, 0x8, &(0x7f0000ffb000/0x2000)=nil, 0x3}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x100000000, 0x40000) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000003c0)={0xfffffffffffffffb, 0xfffffffffffffffe}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x204002, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r3, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xfff, 0x1a04}, &(0x7f0000000200)=0x90) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000380), &(0x7f0000000340)) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f00000000c0)=0x7f) [ 1446.504874] binder: BINDER_SET_CONTEXT_MGR already set 11:33:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x9, 0x540) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="834c870d8cc34935273c434d0b77d90bbe302dbd39d8f0e809140b4c098274bbf33df912fbb6a790b13c4148bcf56922650c34c81e9ea5e9bc7a4abd17af38175fd200aa8cd0c98fded39924c97959c942a26263a6395f70c3b6230b04f525e4e83192cc468283c42c987bdb5e206576a39851bf4f4472ab00504518d8b3a947ceac0b87ecaa1506d3164c6a177752bb5655c00d7fd5769e3e76ea44b3f203778390e3a96d"], 0x0, 0x0, 0x0}) [ 1446.547908] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1446.550663] binder: 18588:18592 unknown command 0 [ 1446.560268] binder: 18582:18586 ioctl 40046207 0 returned -16 11:33:32 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8000, 0x180) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000040)=0x3f) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) 11:33:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000002c0)={0xed, "8d317856959aef1756ee75b2979fd8f892afe785f566c26ad1532a3543228173", 0x1, 0xaaaebd2478ab64ca, 0x6, 0x18e6, 0x10, 0x2, 0x3, 0x40}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000180)=@generic={0x3, 0x7, 0x5ec1a738}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="76cb16a68c6ef35c319858721242e3b91562df8e65b215358a48c93fa81b33a70f9e026e418b23000000000000"], 0x0, 0x0, 0x0}) [ 1446.593431] binder: 18588:18592 ioctl c0306201 20000440 returned -22 [ 1446.597054] binder_alloc: allocated: 2064 (num: 236 largest: 96), free: 10224 (num: 1 largest: 10224) [ 1446.622141] binder: BINDER_SET_CONTEXT_MGR already set [ 1446.627474] binder: 18582:18596 ioctl 40046207 0 returned -16 11:33:32 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7fff, 0x24000) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000880)={&(0x7f0000000840)=[0x400, 0x80000000], 0x2, 0x7, 0x80000001, 0x3, 0x2, 0xa258, {0x9, 0x0, 0x5, 0x6, 0x7, 0x2, 0x1, 0x1b, 0xdad, 0x4, 0x80, 0x0, 0x7, 0x8001, "b74dd8d0d0ed0604ce0384392458faaa2956715cd8ec0b524ebc1114f5a9ffb9"}}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)={0x3, 0x0, [{0x100000, 0x85, &(0x7f00000000c0)=""/133}, {0xf000, 0x79, &(0x7f0000000180)=""/121}, {0x5000, 0x97, &(0x7f0000000280)=""/151}]}) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f00000005c0)='127.0.0.1\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='9p\x00', 0x60, &(0x7f0000000740)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@cache_none='cache=none'}, {@cachetag={'cachetag', 0x3d, 'selinuxloeth0GPL{/@'}}, {@fscache='fscache'}, {@posixacl='posixacl'}, {@version_9p2000='version=9p2000'}, {@access_any='access=any'}, {@nodevmap='nodevmap'}], [{@obj_type={'obj_type'}}, {@dont_appraise='dont_appraise'}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@permit_directio='permit_directio'}, {@fowner_gt={'fowner>', r2}}, {@dont_appraise='dont_appraise'}]}}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000003c0)={0x0, 0xdf, "324acc5a1fc73e05cec43c43bea88a957d22d5e86e872caf7fffa5f9c58640ce84c1a6182d669ef84459b3feabe224e1232db59762cb0cc2120c88007e8a1399bdec366a4cc0411d5576f79a4fc1718f3f10db92d377cc131e6c80ca9d3277fa6bdd0368d0cf19e1aa174ddb544164357cfac406b519fc7d7fb002ff8a79cd341541a9b257238c8e49e20df55eb89e37f334a1448daa7aee774a30f079098d3011b07157ee6aa9bce3cd98678b4e57f691910b2ef5876c61b26de8f39129f8c6d6914e23948c4da51bdd435f6f24a62f417db6fe388100588d0cdab4e87135"}, &(0x7f0000000040)=0xe7) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000200)={0x5}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={r3, @in={{0x2, 0x4e20, @broadcast}}, 0x8, 0xbd, 0xa48, 0x7, 0x40}, 0x98) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=r3, 0x4) [ 1446.655799] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:33:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040e9cd893d7a3ab33ceb59f87b60be629244f219500e8e176c838dc8894809e72c66a4ee99aecab81cdf4f8ed2048cdccab295afd2e0689008cb9c7c8f8c3d0d305c603641b5398f1e6fee726599300a015df2038dcf14b6882f2532d9e46005b75b7bcb851b33863f0c989342fcd39f4808e13404159124ca263e496c7bd57661c8a2e67aa44bf71f52248b400754c017063728b0d35265e880f2c0d36dd39fffd67341fbe3915c481555605403637566076f2b1f6115327624bc8fafe5962f78"], 0x0, 0x0, 0x0}) 11:33:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, 0x1, {0x80000000000000}}, 0x18) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) getsockname(r0, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80) [ 1446.707274] binder: 18601:18605 unknown command 226970755 [ 1446.728974] binder: 18601:18605 ioctl c0306201 20000440 returned -22 [ 1446.737364] binder_alloc: allocated: 2072 (num: 237 largest: 96), free: 10216 (num: 1 largest: 10216) [ 1446.753345] QAT: Invalid ioctl 11:33:32 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x1f, 0x400002) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000140)={0x1, 0xfffffffffffeffff}, 0x2) getegid() r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) syz_read_part_table(0x2, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700690000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa25681b3a5024e557ded51a1ee1bd33bbecb333f501596ab62b86bdca0e2fcacac6348fdaf63e473d551635221fb1940ca00e0f52c3de6718101203c74388af1746faa4f2d78a5bc0458509aef94e8ea91f5870c1f3e81b35dc4cfb7d8b005645c576b692a400225eeb1f5db7b02c358080f84358301968fc2a2c9438e2927af0cd6b3b0e889a4657f2ff4a9502485806c6585968b63ceb78cb4d50c181bba595f1653ab16e2bff71841a4f2efbc3c7df7367c9e4", 0x114, 0x1a0}]) sendto(r1, &(0x7f0000000040)="7ac3fce8a5aa61b10cb1cc49b7ef23e39a", 0x11, 0x20000000, &(0x7f00000000c0)=@isdn={0x22, 0x2, 0x0, 0x280000, 0x9}, 0x80) 11:33:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x4, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x4d0800, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000100)) 11:33:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, @bcast, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @bcast, 0x100, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1446.784304] binder: 18609:18620 unknown command -1508455562 11:33:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) r1 = dup3(r0, r0, 0x80000) sendmsg$unix(r1, &(0x7f0000000380)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)="00513428950393c1d13e386649a12efed45371c9bc4a", 0x16}, {&(0x7f0000000280)="e0e090aff2383c440aef55a1a3c980b5f7cead1085f737a7264eddad45851bee8c8f8daeb1cfc8a3bbec3da2b06f7d8849aea50ba0be4998e8e09180eb67faf45693af9e2651a9e7b04a8865c0faee37cb3a65f595e7bbfa5da4b2b5e2bf88eab43060ad3c755dddb59e4c4e7a9ab6fbc3c590e3007417fdaad372caf5fb7cdd731e116803bc48cc335a9e2b9620b8359607c2523809f5c3f683881bf903de78c2547a5ebf1559100d63392963ad5e23e7067c1e98dabf0559ede2e495c33ac3f9248673eefabdaeb3c008b3771e3566fe285fc7f079606167184fa43167a3ffb8057fe39ce7839b5aa28c9c36c8b18030cbe962a1", 0xf5}, {&(0x7f0000000180)="94ee924b8cf20c9bf81231c27039417336a068051d23c2e16da035a1fc55b08eb07736d1860aaf84661dced37ecc710265b427ae39b0f7957c", 0x39}], 0x3, &(0x7f0000000200)=[@rights={{0x10}}], 0x10, 0x4040000}, 0xc0) setsockopt$sock_timeval(r1, 0x1, 0x57, &(0x7f00000003c0), 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000400)=0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1446.836070] binder: 18609:18620 ioctl c0306201 20000440 returned -22 11:33:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0xffffffff00000000, 0x40) name_to_handle_at(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x52, 0x5, "a9c1584b6ac7c3947f4edb957797aab8a0a02b77d71fcf2a76f6fa669c4f73802254d612ef3d227810970f8be3e4135cea540418fe4446495d6bf1e9b027f9e398a379d328cb4b749679"}, &(0x7f0000000200), 0x1000) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)="6aa7962e1a6df3eaf5b2c3556925a6ffc27e30673ac86c69bf49868b1461848f193761", &(0x7f0000000080)=""/174}, 0x18) 11:33:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x9, 0x540) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="834c870d8cc34935273c434d0b77d90bbe302dbd39d8f0e809140b4c098274bbf33df912fbb6a790b13c4148bcf56922650c34c81e9ea5e9bc7a4abd17af38175fd200aa8cd0c98fded39924c97959c942a26263a6395f70c3b6230b04f525e4e83192cc468283c42c987bdb5e206576a39851bf4f4472ab00504518d8b3a947ceac0b87ecaa1506d3164c6a177752bb5655c00d7fd5769e3e76ea44b3f203778390e3a96d"], 0x0, 0x0, 0x0}) [ 1446.916812] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1446.929828] binder_alloc: allocated: 2080 (num: 238 largest: 96), free: 10208 (num: 1 largest: 10208) [ 1446.945172] loop4: p1 < > p4 [ 1446.948654] loop4: partition table partially beyond EOD, truncated 11:33:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0xad, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404099bab7a14fc46e30633ddc76f90badbb54ad0c1a6059a34aced77455099d6dca3b5a1a3c820ba211da5153abf67adc11f317f3e09c22c8c05addaf2104ef18e373f6f772d82d4005990a75000069c4e3c8419f7e9186ebb738a7d8aaa67c48c82fae3235251b1898350c8cc7"], 0x0, 0x0, 0x0}) 11:33:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r2 = msgget(0x3, 0x8) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000300)=[0x0]) fcntl$getownex(r0, 0x10, &(0x7f0000000340)={0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, r1, 0x0, 0xd, &(0x7f0000000380)='/dev/binder#\x00'}, 0x30) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000480)={{0x6, r3, r4, r5, r6, 0x40, 0x8}, 0x87f5, 0x2, 0x8, 0x0, 0x5, 0x3, r7, r8}) 11:33:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) prctl$PR_GET_NAME(0x10, &(0x7f0000000100)=""/141) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00c@@'], 0x0, 0x0, 0x0}) 11:33:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0xfffffffffffffffc) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200000, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff0000000000000000000000000000000000000000000025ccd903b64c70dfbdb0c5ca22"], 0x68) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8080}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="03100000", @ANYRES16=r2, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x5}, 0xb) connect$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, {0x8, 0x2, 0x4, 0xfffffffffffffff8, 0x7, 0xfff}, 0x5}, 0xa) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xb) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) [ 1447.022905] loop4: p1 size 2 extends beyond EOD, truncated [ 1447.030153] protocol 88fb is buggy, dev hsr_slave_0 [ 1447.035318] protocol 88fb is buggy, dev hsr_slave_1 [ 1447.037098] binder: 18653:18656 unknown command 226970755 [ 1447.059441] binder: 18653:18656 ioctl c0306201 20000440 returned -22 11:33:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x9c12, 0xffffffffffffffc0, 0x7, 0x8, 0x0, 0x40, 0x1000, 0x8, 0x0, 0x4, 0x2, 0x3, 0x7fff, 0x5fcde45a, 0x100000001, 0x0, 0x1, 0x80000001, 0x7, 0x3, 0xffffffffffffffc1, 0x5, 0x7, 0xf7, 0x1, 0x2, 0x100000000, 0x5, 0x9, 0x4b90, 0x1, 0x1, 0x10001, 0x6, 0xb6, 0xffffffffffffcf0d, 0x0, 0x2, 0x1, @perf_config_ext={0xc4ad, 0x7fffffff}, 0x20000, 0x91, 0x7f, 0x0, 0xb, 0xc59c, 0x7fffffff}, r2, 0xb, r1, 0xa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x4, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x4d0800, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000100)) [ 1447.114844] binder: 18659:18670 unknown command 1080229980 [ 1447.120196] loop4: p4 start 1854537728 is beyond EOD, truncated [ 1447.135728] binder: 18659:18670 ioctl c0306201 20000440 returned -22 [ 1447.221891] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1447.244359] binder_alloc: allocated: 2120 (num: 243 largest: 96), free: 10168 (num: 1 largest: 10168) 11:33:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0xd, &(0x7f00000000c0)='/dev/binder#\x00'}, 0x30) wait4(r2, &(0x7f0000000140), 0x9, &(0x7f0000000280)) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)="70f5afc271fad854b633d0104be436c79ab8f490d9236bd5a18b6c83edab80fd236f968a2f957a1a21af5471e9041803af153f3746fac64c8512be26232ac9c67835c5747469f98159a970bb3f59ca6dadaab792b4d287f6a659e3dcb91479241319ee0f15a89a4073bd292464b64b7a80d899cd066e69a84faf3c85b792551da70a7b914dafa058c77113650304914a0814d1be4cb1610aaeaca922eaf8067955a801704b9cef322dde04224fabf621b8fec8c3305f9aeb89347a31", 0xbc, r1}, 0x68) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x8, 0x1f, 0x20, 0x2, 0x0, 0x8001, 0x18040, 0x8, 0x903, 0x1, 0x1f, 0x400, 0x106, 0x2000000000, 0x2, 0x4, 0x3540000000000000, 0x8, 0x0, 0x4, 0xd0, 0x7ff, 0x1, 0x56, 0x5d00, 0x0, 0x6, 0x100, 0x81, 0x10001, 0xfffffffffffffff7, 0x7fff, 0x8, 0x1ff, 0x1000, 0x8000, 0x0, 0x1, 0x6, @perf_bp={&(0x7f0000000200), 0x1}, 0x4000, 0x3, 0x3a, 0x3, 0x9, 0x401, 0x4}, 0xffffffffffffffff, 0xf, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:33 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x80802) ioctl$TCSETXF(r0, 0x5434, &(0x7f0000000040)={0x2, 0x3f, [0x85, 0x0, 0x3], 0x9b}) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) 11:33:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040de395db80d07d8f7a81f1f340cd9f9bdd03f51d75c16e2fb4080c5a89b02a9472df3cda6275ea2acf477db39e4a82af12dc7353edd8e6e7092d2ab919119b337d2e061a945ce43818135e2bfa77c2d32d81393dccc0000000000004c68ca871c6f6d89e739d6b63a7258a582dfb6da9c0494a1"], 0x0, 0x0, 0x0}) 11:33:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x80000, 0x0) 11:33:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) socketpair(0x18, 0x807, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000480)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f00000005c0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1a0, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x50, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0x12c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x8001, 0x40ba, 0x3ff}) [ 1447.379486] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1447.414627] binder_alloc: allocated: 2128 (num: 244 largest: 96), free: 10160 (num: 1 largest: 10160) 11:33:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x8840, 0x0) write$nbd(r1, &(0x7f0000000200)={0x67446698, 0x1, 0x0, 0x3, 0x4, "04650a3cc233ee40faca09d339154ab1115eec02fc07f6900a1f"}, 0x2a) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, [], [{0x8, 0x96, 0x2, 0x7, 0x6, 0x400}, {0x6, 0x6, 0x9, 0xfffffffffffff7ee, 0xff}], [[], [], [], []]}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x113, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r2, 0xfa23, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}, @ib={0x1b, 0x10000, 0x7, {"0c324e2b01a9c2aa010545b4143fe4b5"}, 0x5, 0x6, 0x5}}}, 0x118) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) 11:33:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, r1, 0x0, 0x9, &(0x7f0000000180)='loginuid\x00'}, 0x30) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000300)='net/sctp\x00\x10\x05\xf38\xddZC\x06\x83,\xdfpB\bq;\xd4\x13\xa8\x00\n\xf2\xed\x18\xeeu\x8fx}\xday\xaa\xb6\xf7\x80\xb1%\x95Y?\x90\x1a\xcf\xdb8q\xc3\xef?3{O\t\x96\xa5\xc5\xa8z\xff\x9e\xf8%\x96\x0e[8\x1b\xfc\x8a\x88\xb7\xaa\xb59\v\x87\xa4\xdc\x9fi9\x1a\'x,\xb5X\x11\x1f\x15_\xdc\xf8\x83\x8e\xec\x85\x16Y\x99*>!\xe4\xa2F\xf9L\x8d\xba\xe5\xef\x14A\xe2\x7f\xcf\x9fi\xda\x02\xf5\x03V\xdc\xebX4F\xf9\xc8\xa4\xefP*\xdex\xcaBC\xccKh\xc1\xe2S\xce\x19H\xa7\xe7S') ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1447.439009] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1447.455361] binder_alloc: allocated: 2136 (num: 245 largest: 96), free: 10152 (num: 1 largest: 10152) [ 1447.480315] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:33:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='@wlan1user\x1b$\x00', r1}, 0x10) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) r2 = add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)="f2a3b2bf0c9985fd8eae4e858dcee7c8e9b0b68b0a3afba50276a987904ca180855fe1efc5762232f3eb4e37890d7d985d9823a51bb0c256940a879b23d0a1245860d9c42a044849160d5fbf9e9dd8ac6ddbb641fe235d0ebc29845b8c59a020b004359adad2136194a6979d5a8bbd48c794a84fa01fd17039772ed00f071974ecef50d3efeaccbf7a9d226b0aa1914e11c65bee6f77876458e737a3868dbb8774f6b7360dec3552b185846f10d54f443787555a", 0xb4, 0xfffffffffffffffe) syz_open_dev$sndmidi(&(0x7f0000000400)='/dev/snd/midiC#D#\x00', 0x7fff, 0x8100) add_key$user(&(0x7f0000000440)='user\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)="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", 0xff, r2) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000340)={r2, 0x15, 0x89}, 0x0, &(0x7f00000001c0)="4b7883cf95dc1c5d510ae566724465db55998ab3ce", &(0x7f0000000280)=""/137) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)) 11:33:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x101000, 0x0) write$FUSE_GETXATTR(r1, &(0x7f0000000100)={0x18, 0x0, 0x1, {0x1000}}, 0x18) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000140)={0x422e, 0x8, 0x400000, 0x1}) 11:33:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0xfffffda8, 0x0, 0x0}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x40400, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x44, r2, 0x700, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1, 0x8, 0x80000000, 0x584f4c58, 0x0]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x40]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x8040) [ 1447.492388] binder_alloc: allocated: 2144 (num: 246 largest: 96), free: 10144 (num: 1 largest: 10144) 11:33:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x80000, 0x0) [ 1447.590105] protocol 88fb is buggy, dev hsr_slave_0 [ 1447.595323] protocol 88fb is buggy, dev hsr_slave_1 11:33:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x82000, 0x0) [ 1447.638557] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1447.663226] binder_alloc: allocated: 2160 (num: 248 largest: 96), free: 10128 (num: 1 largest: 10128) [ 1447.677195] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1447.687047] binder: 18733:18744 ioctl c0306201 20000440 returned -14 [ 1447.699556] binder_alloc: allocated: 2160 (num: 248 largest: 96), free: 10128 (num: 1 largest: 10128) [ 1447.722063] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:33:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = shmget$private(0x0, 0x1000, 0x5400004c, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/155) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 11:33:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='@wlan1user\x1b$\x00', r1}, 0x10) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) r2 = add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)="f2a3b2bf0c9985fd8eae4e858dcee7c8e9b0b68b0a3afba50276a987904ca180855fe1efc5762232f3eb4e37890d7d985d9823a51bb0c256940a879b23d0a1245860d9c42a044849160d5fbf9e9dd8ac6ddbb641fe235d0ebc29845b8c59a020b004359adad2136194a6979d5a8bbd48c794a84fa01fd17039772ed00f071974ecef50d3efeaccbf7a9d226b0aa1914e11c65bee6f77876458e737a3868dbb8774f6b7360dec3552b185846f10d54f443787555a", 0xb4, 0xfffffffffffffffe) syz_open_dev$sndmidi(&(0x7f0000000400)='/dev/snd/midiC#D#\x00', 0x7fff, 0x8100) add_key$user(&(0x7f0000000440)='user\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)="3ebc4ee961b6be972d8f164df08e8c6e5a73870e88aca4e4b738f57651b49800e97fa06d3890408bed592c4bafe13b6299a0840ae7bc40c0848b1825762cc9ede1243b535feebcdb8b7ded5b9a6f47473dd7a68ff6a1f6c5e45352a14692c465212637a770680fb40279a8dfa23a8c90ee7086f569ac5e5d5a21878b2bb16ec37af6aba275d13ecd0c65141434d6402dd039761c9680f3671b6092b3ab1f36670fe7e8efd3f77424185828ebc5aeb3ab8f9df8e13a1f99c2184934d13bce3d6fefe3a1497c079ad6294ea6d3010e12390885ab0b5b7f55ba76d7d27cf960e4df326d340c35efefb23b71b83290a4c4bf542f1d2995626b1f78e703cde3d5af", 0xff, r2) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000340)={r2, 0x15, 0x89}, 0x0, &(0x7f00000001c0)="4b7883cf95dc1c5d510ae566724465db55998ab3ce", &(0x7f0000000280)=""/137) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)) [ 1447.775072] binder_alloc: allocated: 2160 (num: 248 largest: 96), free: 10128 (num: 1 largest: 10128) [ 1447.830155] protocol 88fb is buggy, dev hsr_slave_0 [ 1447.835306] protocol 88fb is buggy, dev hsr_slave_1 [ 1447.845280] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1447.856031] binder: 18733:18746 ioctl c0306201 20000440 returned -14 11:33:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ftruncate(r1, 0x1) 11:33:33 executing program 4: r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000140)={'veth0\x00', 0x10d144}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c80)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000668273d702a8c468bb929293ee87e0000000006000000000000f000000040040000f002000040040000300500003005000030"], 0x1) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x10010000000035) fcntl$setstatus(r1, 0x4, 0x80000000002c00) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000300)=ANY=[@ANYBLOB="dc0000000000000005000000000000000100000000000000", @ANYRES32=r0, @ANYBLOB="00000000c5000000000200000000ba5b69cc92efa8e4ffffffff1cf813a1fb8e0a977fb05ed032"]) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000000)=[0x6, 0xffffffffffffff19, 0x50f5ccbd, 0x4], 0x4, 0x1000, 0x2, 0x5, 0x8, 0x100, {0x800, 0x55, 0x8, 0x2, 0x3f, 0x51a, 0x7fff, 0x9, 0x2, 0xfffffffffffffffc, 0x837, 0x80000001, 0x3ff, 0x7, "7a06a09a6f0957f9b4a86a701adf2fb9e977fc8b0aa21b06255d3922563d49a6"}}) fcntl$dupfd(r3, 0x406, r0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000280)={r0}) setsockopt$inet6_dccp_buf(r5, 0x21, 0xf, &(0x7f00000001c0)="3e1bb4b46881205baab9038aeb99065f4c9f188479e15656c8e2e57396087d6e9037b3fd5958e83652b4ce77050448b856fad19d81bcef49d8257a2d230caf13502e3d65b05abfcfa1b11c4854fdc098d4d54c76", 0x54) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:33 executing program 3: r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40100, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000080)=0x7fff) r3 = fcntl$dupfd(r0, 0x0, r1) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) [ 1447.885372] binder_alloc: allocated: 2160 (num: 248 largest: 96), free: 10128 (num: 1 largest: 10128) 11:33:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000002c0)={0x9, 0x1, 0x0, 0x1, 0xffffffff}, 0xc) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x180800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) [ 1447.974204] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1448.016309] binder_alloc: allocated: 2160 (num: 248 largest: 96), free: 10128 (num: 1 largest: 10128) 11:33:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000001c0)={0xffffffffffff6d2e, 0x2, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340404a59dd0fadd5d8587b6c523d9cc410189212fa859db9badd13c7c5641beb393d66ac0555a88c4e6579f1f5decb7007c296c22466cfaa4a63474d059b9bc6eef9e46cded0dff92b3ea654479716b0a46094452457dbf8a2038c545b17a10ee16ac701349ca29a440e48d8b7700d05c77cbaab5c22b639aa70e4cbe38c6c3e065c2cb104b5e322dc9e759c52fba0f07a08db3346803c78703f97de0f3f1c9006cc7158b294ce6a13d340688863cc"], 0x0, 0x0, 0x0}) 11:33:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0xd, &(0x7f00000000c0)='/dev/binder#\x00'}, 0x30) wait4(r2, &(0x7f0000000140), 0x9, &(0x7f0000000280)) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) [ 1448.088507] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:33:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000200)=""/108, &(0x7f0000000280)=0x6c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r2], 0x135, 0x0, 0x0}) [ 1448.140567] binder_alloc: allocated: 2160 (num: 248 largest: 96), free: 10128 (num: 1 largest: 10128) 11:33:34 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) [ 1448.198800] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1448.226350] binder: 18785:18793 unknown command -1 [ 1448.234763] binder_alloc: allocated: 2160 (num: 248 largest: 96), free: 10128 (num: 1 largest: 10128) 11:33:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 11:33:34 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x297, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x401, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x700, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x1e, 0x0, &(0x7f0000000740)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRESHEX=r2, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRESHEX, @ANYRES16, @ANYPTR64, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRESOCT=r0, @ANYBLOB="9c0093a682b10e7abfcd3b1d1b3423a36ab9ab508e39de8a95f813d592f1613299cece07f64ebc37ad6bb3ba41ad8232bc9b4e4fb15371"], @ANYRES32=r0, @ANYBLOB="b6a55bdb343b989d5b7fb1b6470eabb11b516b8950ac37125bca035ac79cdd6c6edf907d70d83ad4130b281fb007cad1a4bff5bc7fae3341166547853dcf0b40623c19b3436860d5171270376e77f3989284dbbca0f1e6bdcd3f4736ed092a8a3d2efbdb0477bb9a21b6777b26bd", @ANYRES32=r0, @ANYPTR64, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRES64=r1, @ANYRESOCT=r0]], @ANYPTR64, @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYRESOCT=0x0, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYBLOB="e3c7f2c7bbc758c86b4d55edc18d64cf1a11486365ad5d7cd2495168121de150c3a006d85b67ba7cc58a4c01d2520960e149c863a8428a6edcdd53e67e54562d867fdb9162fd0d0dd70f5ec9b7e957e2076d3e8e86255c11bd53af9d6b0353c52eb3274ef3ee30bf7cc6", @ANYPTR, @ANYRES32=0x0, @ANYPTR, @ANYPTR, @ANYRES32, @ANYRES64=r0, @ANYBLOB="7f7b345d39c8881bf479108f73ecd0915a097ce671bac8a55521c68357b36f9f418f17bb5cc7930283e660eaf6a8b25210e896cdce3abc722f3d4d7985bccd4f3e002380f2b6ce53e6a0a30be91bdb8494a369d5f47a40b47490fd9677de21213308e13d1558f1d78e066b5884506e598224d13bd12e4a087ca1755d9fbd4e2c67692e860319cf573f4deaaf6c79feee7bdc62a78135b603b77b593a7a7779662d5a72dd5bd8d7c3ef4059575d21e378fed5ccc9c9988d427dba2c750f21828481b8a46bb7a89cd67b1cc085fcdf3db7d2"], @ANYRESOCT, @ANYRESHEX=r2, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRES64=r2, @ANYRESOCT=r2]], @ANYRES32=r0], 0x8b, 0x0, 0x0}) [ 1448.243908] binder: 18785:18793 ioctl c0306201 20000440 returned -22 [ 1448.256147] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1448.275430] binder_alloc: allocated: 2160 (num: 248 largest: 96), free: 10128 (num: 1 largest: 10128) 11:33:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0xd, &(0x7f00000000c0)='/dev/binder#\x00'}, 0x30) wait4(r2, &(0x7f0000000140), 0x9, &(0x7f0000000280)) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000100)={0xee7e, "79337ecaff62f218fb6f3bf7574ba60ebc22394fde3650ae4edaf5d453cdfccd", 0x1, 0x1ff, 0x80000001, 0x4}) [ 1448.418637] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1448.438460] binder_alloc: allocated: 2160 (num: 248 largest: 96), free: 10128 (num: 1 largest: 10128) [ 1448.459028] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1448.472901] binder_alloc: allocated: 2160 (num: 248 largest: 96), free: 10128 (num: 1 largest: 10128) [ 1448.482948] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1448.504070] binder_alloc: allocated: 2160 (num: 248 largest: 96), free: 10128 (num: 1 largest: 10128) 11:33:36 executing program 4: listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/253, 0xfd) syz_mount_image$minix(&(0x7f00000002c0)='minix\x00', &(0x7f0000000300)='./file0\x00', 0x2, 0xa, &(0x7f00000009c0)=[{&(0x7f0000000340)="07b611919ce86fc1a52e818a97381168140567dee71c37f02f1b5bf44362988a54a8b3269b9f8763a788953b90ebb3d90ccf8f8ef1c5227169741f62cc4e4e5e0a3e2914b8bba486729c820de2bfd11f7447e7b338e75c8d559aacf25f11", 0x5e, 0x100}, {&(0x7f00000003c0)="490c3ebe6605ed91b79e0f5fa2d94778bcab2ce60ba257ac0be136ae203a50696321786e6054be934d7434b5aa3015f8319357ef9a40da8424b375e8a3ed2b16db2569df69da3f87fe5c8cea035046f03376b8ff180b140a082e4ef702dbe1fd0aff6e19cfef042ae7b14aacffb4ff67e1ef1bc92478df9e1e9deef87673f653e5e09212cbd2136bfae06f572a385a1d060882f6d860e90d2ba620b6429e6675a0c2cc442e9f77384ddf2811bc4b9f735a5aac8ece2aafbc8a4a6b5c", 0xbc, 0x3}, {&(0x7f0000000480)="8aeb2cf75ff1e33cdf06db6a168d68ef41ec3562883595fc1867b46bf2457e18876f910ab3ffb8ca0dcbc6d403f983323457e32f35d3611c6bee95a26ad87340aef1934d715ba6221c6de892a89a755269510d5af5c24a46215eab8e70f7a7ae616dec2dc5c0279788a173f0956d3c594c747d1bec6ceede2fa8a1246f0d24512413aafd41f8a4b5fd35778143de9fe602446a6a6f169f809e63286c9fc8cc026b88350427ac04bd588e828c", 0xac, 0x9cb1}, {&(0x7f0000000540)="3f10e6d04d6e61f5c2dc15dbac872cb0322d60162ba2b524affc48fbd7bb4f7a73a5beecb2e65e09958468c763f3feea87a45af6026127745f35d5dcab0f8effdd50063c2ef1a319f5c10055d24dec0f874108b31b8ad6e1fa89dd5a961890567114050bcaab", 0x66, 0x1}, {&(0x7f00000005c0)="6343e0e74fcd5f52cd24356e9c4af37669bab5ca5ca9b43695a82805bdcc8ff49849d8c8fb530acd929af3cf35f2532bd7c5045a49b70c70f54f230b8dfa3cc1330191d9d41223cdffd96bc7102ebc3b8bd0ff51ab405c18760709bf672f334f3b61b3d6916890feb2c4a8d14384241ca7426a49b9af1334ca4f1d5e4c0731fb220e25", 0x83, 0x3}, {&(0x7f0000000680)="f4b20e0edfe10f08e2b2de93dfecf06146aa8f2f8d583ee4871ce940fbc87f01b9e55d1def5fd13aa199d61b8b2c07c81f0319d68883d617dc6576f604dce55c1708ae8f7cd16c224ce18a", 0x4b, 0x6}, {&(0x7f0000000700)="2e24da0793c1d8abdd0506a310e1bfe3193ae0f3f0eadb08fdb4ff06006b68f4c65cf0c691f900ae9c4d5f28d1b3c9bdd43ca70faf0a63972aed33d4f390f07a9d3cc12bc448e2c686a7492790f055b7d3e87b4c7ee2b535f9bd209a9c8b467dba61eab21dbb02e460242123fe5d3e64f7c25cc5f6c9fda941887e16127ef1f236a1396f3a449a0d1c72155f12", 0x8d, 0x100000000}, {&(0x7f00000007c0)="7e1fc4270afbd6260456c2d7d196784e6586b6a141bbce3fa287af5a6226bd6c54475dce051b97d0fa5620fa3ba5a2379f6a53518375592cba931f0d4b7ac52cc2b7c58b656bd5a453def8071a305875f09fce4e9cce0ba7ae21478341f89975987ac89f63a4a5b25f8290e394a37e70dfa4700c0c7bc14990715cf3154a59fa00e992ad53740505a49bf8f4e7681fa11d086813e0a1bc241a653dc1", 0x9c, 0xfffffffffffffffb}, {&(0x7f0000000880)="ff4587da484d259c9f9a0e999108f120ef94fc67ef25507ae8d1b9c42633cdc3d63bcbaae516b728bac9398e69f63dacd8aa717d85d05a15f70243732d16e96cefcd69c45a1a22f946bf08d7b14c77a0da4c3a48ec8e3d2a18a229ef0ef6b7d0a8aa083afef80aa63ef7b2fb657a72cff59d95caf53a491503a95c7da9ae3ec212370af24a3081ec", 0x88, 0x9}, {&(0x7f0000000940)="819b05f503980a85dc36c775a2894babb06af97c62eb21c2525d86db7903541f5589182f7d7597621d24c272c3bfa94ee182661d2905fb29797e6306bf74bbf1743f8cf09a646d9170c4a4ac6023bd3850f8fcdd07f420a0ea4b", 0x5a, 0xfffffffffffffff9}], 0x20, 0x0) setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x6002) syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x1, 0x200000) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:36 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x158d, 0x0, 0x1, 0x3ff}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000040)={0x4, r1}) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) 11:33:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x40, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00g@@'], 0x0, 0x0, 0x0}) 11:33:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)="70f5afc271fad854b633d0104be436c79ab8f490d9236bd5a18b6c83edab80fd236f968a2f957a1a21af5471e9041803af153f3746fac64c8512be26232ac9c67835c5747469f98159a970bb3f59ca6dadaab792b4d287f6a659e3dcb91479241319ee0f15a89a4073bd292464b64b7a80d899cd066e69a84faf3c85b792551da70a7b914dafa058c77113650304914a0814d1be4cb1610aaeaca922eaf8067955a801704b9cef322dde04224fabf621b8fec8c3305f9aeb89347a31", 0xbc, r1}, 0x68) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x8, 0x1f, 0x20, 0x2, 0x0, 0x8001, 0x18040, 0x8, 0x903, 0x1, 0x1f, 0x400, 0x106, 0x2000000000, 0x2, 0x4, 0x3540000000000000, 0x8, 0x0, 0x4, 0xd0, 0x7ff, 0x1, 0x56, 0x5d00, 0x0, 0x6, 0x100, 0x81, 0x10001, 0xfffffffffffffff7, 0x7fff, 0x8, 0x1ff, 0x1000, 0x8000, 0x0, 0x1, 0x6, @perf_bp={&(0x7f0000000200), 0x1}, 0x4000, 0x3, 0x3a, 0x3, 0x9, 0x401, 0x4}, 0xffffffffffffffff, 0xf, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x20001, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) setsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, r2}, 0x14) [ 1450.946259] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1450.957656] binder_alloc: allocated: 2160 (num: 248 largest: 96), free: 10128 (num: 1 largest: 10128) [ 1450.969414] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1450.987897] binder: 18825:18833 unknown command 1077962496 11:33:36 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x303) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) [ 1450.995443] binder_alloc: allocated: 2160 (num: 248 largest: 96), free: 10128 (num: 1 largest: 10128) [ 1451.008813] binder: 18825:18833 ioctl c0306201 20000440 returned -22 [ 1451.027308] binder: 18825:18842 unknown command 1077962496 11:33:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x154) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9e6f) 11:33:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x1f, 0x400002) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000140)={0x1, 0xfffffffffffeffff}, 0x2) getegid() r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) syz_read_part_table(0x2, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700690000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa25681b3a5024e557ded51a1ee1bd33bbecb333f501596ab62b86bdca0e2fcacac6348fdaf63e473d551635221fb1940ca00e0f52c3de6718101203c74388af1746faa4f2d78a5bc0458509aef94e8ea91f5870c1f3e81b35dc4cfb7d8b005645c576b692a400225eeb1f5db7b02c358080f84358301968fc2a2c9438e2927af0cd6b3b0e889a4657f2ff4a9502485806c6585968b63ceb78cb4d50c181bba595f1653ab16e2bff71841a4f2efbc3c7df7367c9e4", 0x114, 0x1a0}]) sendto(r1, &(0x7f0000000040)="7ac3fce8a5aa61b10cb1cc49b7ef23e39a", 0x11, 0x20000000, &(0x7f00000000c0)=@isdn={0x22, 0x2, 0x0, 0x280000, 0x9}, 0x80) 11:33:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000140)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x7, 0x8, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040f8d402dbac018a350fb1ffa4bb9f9219d8c494c6b6be49447075f0e50cfb0037b71d11a4fafa843d5c414ead74c27eee1a02d2ea23c9a65e75da58f7065d9e59c24a46f4bc4931d976d2e64a62eb6623dfa3e20a699d730cefd9a4024df03318b95d63b5e19de088b3893fcb7e6feb3b763cd05b886621de51f4c444188559d8e1ad7cf76eb893b90aa26d55967849c74f9eeb920fda75934ed16662599353cc4a98027f27f3a67cd7cc6e989806c9f060"], 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000280)={r3, 0xffffffff, 0x1776a922}, 0x8) [ 1451.047104] binder: 18825:18842 ioctl c0306201 20000440 returned -22 [ 1451.080764] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:33:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x2) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) [ 1451.129267] binder_alloc: allocated: 2168 (num: 249 largest: 96), free: 10120 (num: 1 largest: 10120) 11:33:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)) 11:33:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0xffffffff, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000002c0)) modify_ldt$write(0x1, &(0x7f00000000c0)={0x401, 0x20100000, 0x0, 0x79de, 0x0, 0x40b, 0x0, 0x1, 0x6, 0x9}, 0x10) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1f, 0x20000) getdents(r2, &(0x7f0000000140)=""/159, 0x9f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1451.183830] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1451.214116] loop1: p1 < > p4 [ 1451.217398] loop1: partition table partially beyond EOD, truncated [ 1451.218256] binder: 18859:18866 ioctl 89e8 20000140 returned -22 11:33:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 11:33:37 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x2) write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000000c0)={0xa, 0x6, 0x9, 0x7f}, 0xa) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0xfffffffb, 0x0, 0xffffffff}) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000000)=0x5) fsetxattr$security_ima(r1, &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@v1={0x2, "cedc2bc38acbfe56dd"}, 0xa, 0x1) [ 1451.257593] binder_alloc: allocated: 2168 (num: 249 largest: 96), free: 10120 (num: 1 largest: 10120) [ 1451.272942] binder: 18859:18879 ioctl 89e8 20000140 returned -22 [ 1451.292381] loop1: p1 size 2 extends beyond EOD, truncated 11:33:37 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x480, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x2, 0x40040) renameat(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000340)='/dev/snd/controlC#\x00', 0xa9e9, 0x101000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x7, 0xfffffffffffffffd, 0xfffffffffffffff7, 0x4, 0x8}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r3, @in={{0x2, 0x4e23, @loopback}}, 0x2, 0x4, 0x3, 0x6, 0x10}, 0x98) [ 1451.312747] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1451.339682] loop1: p4 start 1854537728 is beyond EOD, truncated [ 1451.351783] binder_alloc: allocated: 2168 (num: 249 largest: 96), free: 10120 (num: 1 largest: 10120) 11:33:37 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x80, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000001c0)=0x3f, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') write$UHID_CREATE(r1, &(0x7f0000000280)={0x0, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/174, 0xffffffffffffff97, 0x1ff, 0xd4, 0x8, 0xff, 0x794}, 0x120) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x64248674faf12c1d, 0x0) prctl$PR_GET_SECCOMP(0x15) write$cgroup_int(r3, &(0x7f0000000040)=0x2, 0x12) [ 1451.396733] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1451.431979] binder_alloc: allocated: 2168 (num: 249 largest: 96), free: 10120 (num: 1 largest: 10120) 11:33:37 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000180)={0x0, 0x91f3, 0x7f, &(0x7f0000000140)=0x100000000}) ioctl$KDDISABIO(r0, 0x4b37) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{}, {0x0}]}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000100)={r1, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff, 0x1}) [ 1451.449778] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:33:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\\\x00', 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000140)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x7, 0x8, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040f8d402dbac018a350fb1ffa4bb9f9219d8c494c6b6be49447075f0e50cfb0037b71d11a4fafa843d5c414ead74c27eee1a02d2ea23c9a65e75da58f7065d9e59c24a46f4bc4931d976d2e64a62eb6623dfa3e20a699d730cefd9a4024df03318b95d63b5e19de088b3893fcb7e6feb3b763cd05b886621de51f4c444188559d8e1ad7cf76eb893b90aa26d55967849c74f9eeb920fda75934ed16662599353cc4a98027f27f3a67cd7cc6e989806c9f060"], 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000280)={r3, 0xffffffff, 0x1776a922}, 0x8) [ 1451.495223] binder_alloc: allocated: 2176 (num: 250 largest: 96), free: 10112 (num: 1 largest: 10112) 11:33:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x8, 0x2, 0x8867}) 11:33:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0xffffffffffffffbc) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000023c0)=""/4096, 0xfec8}], 0x1}}], 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000100)={0x3}) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x101000, 0x0) r2 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x8000000000, 0x4c8100) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000000c0)=""/115) ioctl$CAPI_NCCI_OPENCOUNT(r2, 0x80044326, &(0x7f0000000180)=0xffffffffffffffff) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffa, 0x303041) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000080)=0x15, 0x4) [ 1451.576191] binder: 18901:18910 ioctl 2400 3 returned -22 [ 1451.595686] binder: 18908:18911 ioctl 89e8 20000140 returned -22 11:33:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000047bf28955780b14eb9b0cfd23e4a533df6b5f124f89c9b7c2b219fd3b34da5de611f606a4e309fa1dc8589ced9679450b17604a5dd7d02e4db4cc04f79fec36716fb401fad10b4ecc33456cf4ea313cd297f"], 0x0, 0x0, 0x0}) [ 1451.678363] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:33:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x640d40, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) [ 1451.750109] net_ratelimit: 20 callbacks suppressed [ 1451.750115] protocol 88fb is buggy, dev hsr_slave_0 [ 1451.760343] protocol 88fb is buggy, dev hsr_slave_1 [ 1451.774529] binder_alloc: allocated: 2184 (num: 251 largest: 96), free: 10104 (num: 1 largest: 10104) 11:33:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x9, 0x4000) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x2) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 11:33:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000001b40)) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000900)=[{&(0x7f00000002c0)=""/117, 0x75}, {&(0x7f0000000340)=""/196, 0xc4}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/102, 0x66}, {&(0x7f0000000540)=""/107, 0x6b}, {&(0x7f00000005c0)=""/242, 0xf2}, {&(0x7f00000006c0)=""/169, 0xa9}, {&(0x7f0000000780)=""/110, 0x6e}, {&(0x7f0000000800)=""/211, 0xd3}], 0x9, &(0x7f0000001ac0)=[{&(0x7f00000009c0)=""/230, 0xe6}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x2, 0x0) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) lseek(r2, 0x0, 0x3) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000140)=""/195) [ 1451.812185] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1451.822433] binder_alloc: allocated: 2184 (num: 251 largest: 96), free: 10104 (num: 1 largest: 10104) [ 1451.834208] binder: 18901:18910 ioctl 2400 3 returned -22 [ 1451.847251] binder: 18932:18939 unknown command 0 [ 1451.855630] binder: 18932:18939 ioctl c0306201 20000440 returned -22 11:33:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000100)) 11:33:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x802) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xffffffffffffffc2, 0x0, &(0x7f0000000240)=ANY=[], 0xfffffffffffffe65, 0x0, 0x0}) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={r2, @in={{0x2, 0x4e20, @empty}}}, 0x84) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000100)=0x3000) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000140)={0x92, ""/146}) 11:33:37 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400, 0x0) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000040)={0x440d, 0x8000, 0xfb5, 0x40}) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) [ 1451.874928] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1451.926175] binder_alloc: allocated: 2192 (num: 252 largest: 96), free: 10096 (num: 1 largest: 10096) [ 1451.958618] binder: 18952:18954 ioctl c0306201 20000440 returned -14 11:33:37 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000140)=0x80) r1 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f00000001c0)) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0xc8, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000400)=0x5) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = semget$private(0x0, 0x0, 0x308) semctl$IPC_INFO(r3, 0x2, 0x3, &(0x7f0000000140)=""/148) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x38) ptrace$cont(0x18, r4, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80000) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:37 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x5}}]}, {0x0, [0x5f, 0x7f, 0x30, 0x0, 0xdb2f7fb2199454e7, 0x5f, 0x0, 0x30, 0x5f]}}, &(0x7f0000000100)=""/5, 0x3b, 0x5}, 0x20) fstatfs(r0, &(0x7f0000000180)=""/155) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000080)={r2, 0x3}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x2, 0x0) write$FUSE_LSEEK(r3, &(0x7f00000002c0)={0x18, 0x0, 0x6, {0x200}}, 0x18) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) 11:33:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340408217dc2ac185d3b4cadf8cec96fd1a8de47acb779230442da205860f6ed8a049edca8aaf59aea26c59270e2fb3deb6f80e00007f45f1da8b353c6d278bc6006d0153b530350aaa47d882d761c465e1d62900"/100], 0x0, 0x0, 0x0}) [ 1451.985228] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1451.992498] binder: 18952:18958 ioctl c0306201 20000440 returned -14 [ 1452.001897] protocol 88fb is buggy, dev hsr_slave_0 [ 1452.001936] protocol 88fb is buggy, dev hsr_slave_1 [ 1452.002029] protocol 88fb is buggy, dev hsr_slave_0 [ 1452.018053] protocol 88fb is buggy, dev hsr_slave_1 [ 1452.089188] REISERFS warning (device loop4): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1452.089188] [ 1452.097401] binder_alloc: allocated: 2192 (num: 252 largest: 96), free: 10096 (num: 1 largest: 10096) 11:33:38 executing program 2: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000008c0), &(0x7f0000000900)=0x4) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x101000) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000040)={0x8, 0x0, [{0x8000000f, 0x1, 0x7ff, 0x0, 0x1}, {0x6, 0x0, 0x100, 0x8001, 0x100}, {0x80000007, 0x8, 0x9, 0x0, 0x75e5}, {0xf, 0x12, 0x4, 0xfffffffffffffeff, 0x5}, {0x4000000f, 0x1000, 0x100, 0x2, 0x74b}, {0xd, 0x8, 0xffffffff, 0x1, 0x3ff}, {0x80000019, 0x9, 0x7, 0x0, 0x3f}, {0x80000019, 0xfffffffffffffff8, 0x4, 0x8, 0x1}]}) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000280)="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", &(0x7f0000000140)="848e82ec8ef8cd82cb85e8ecc67f761218fb821a6879f96dd1545e78fb6091f4dcad55acd08311b81018003d6e0142094ab3395766d40a1ed1e0d4e3425f9fe729f0106ee4efc0c20f785ad466575b286042a8882cb347d59aef36dcb1d83037b785a6e877f9acdd696444e027d0129f38", 0x2}, 0x20) 11:33:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40002, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000100)={0x3, 0x89}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1452.162527] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1452.220136] binder_alloc: allocated: 2192 (num: 252 largest: 96), free: 10096 (num: 1 largest: 10096) 11:33:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0x9, 0x10001, 0x8001, 0x9, 0x11, 0x800, 0x4, 0xfffffffffffffffc, 0x401, 0x100000000}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1452.266699] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1452.305874] binder_alloc: allocated: 2192 (num: 252 largest: 96), free: 10096 (num: 1 largest: 10096) 11:33:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xd5, 0x20080) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 11:33:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c-@'], 0x0, 0x0, 0x0}) [ 1452.315914] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1452.338197] binder_alloc: allocated: 2200 (num: 253 largest: 96), free: 10088 (num: 1 largest: 10088) 11:33:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x20000000000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000100)) [ 1452.446430] binder: 19007:19011 unknown command 1076716288 [ 1452.478789] binder: 19007:19011 ioctl c0306201 20000440 returned -22 [ 1452.484889] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1452.499289] binder_alloc: allocated: 2224 (num: 256 largest: 96), free: 10064 (num: 1 largest: 10064) [ 1452.630176] protocol 88fb is buggy, dev hsr_slave_0 [ 1452.635291] protocol 88fb is buggy, dev hsr_slave_1 [ 1452.641177] protocol 88fb is buggy, dev hsr_slave_0 [ 1452.647126] protocol 88fb is buggy, dev hsr_slave_1 11:33:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:40 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f00000002c0)=[{}], 0x0, [{}]}, 0x88) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r2) 11:33:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000080)={0x54, &(0x7f0000000000)="270edd74e75a49ab070854542220860b5d7ae6991aee32edae94929dfe2be2db4d2cfa53562dd7504fb2480d46a0b7ab1fc5c4a1b4ddb4ea02db993dc1661ba66e96d5f1b2e6ee977c7d0698c804ca50a90cd9bd"}) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x1) ioctl$KVM_NMI(r1, 0xae9a) 11:33:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 11:33:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/75, &(0x7f0000000140)=0x4b) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000100)) 11:33:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x104) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000040)) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) [ 1455.073630] binder: 19028:19036 unknown command 0 [ 1455.081762] binder: 19028:19036 ioctl c0306201 20000440 returned -22 [ 1455.083314] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1455.104596] binder: 19028:19041 unknown command 0 [ 1455.105707] IPVS: length: 75 != 24 [ 1455.110436] binder: 19028:19041 ioctl c0306201 20000440 returned -22 11:33:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xe76, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000100)={{0x7fffffff, 0x2}, {0x8000, 0x7f}, 0x40, 0x6, 0xa0}) [ 1455.128843] binder_alloc: allocated: 2224 (num: 256 largest: 96), free: 10064 (num: 1 largest: 10064) [ 1455.140715] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1455.149951] binder_alloc: allocated: 2224 (num: 256 largest: 96), free: 10064 (num: 1 largest: 10064) [ 1455.167016] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:33:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@rand_addr="289aab750762901848c8f09b753199a4", @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4, 0x9, 0x720, 0x400, 0x1, 0x0, r2}) 11:33:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000400)=0x5) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = semget$private(0x0, 0x0, 0x308) semctl$IPC_INFO(r3, 0x2, 0x3, &(0x7f0000000140)=""/148) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x38) ptrace$cont(0x18, r4, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80000) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) [ 1455.185041] binder_alloc: allocated: 2224 (num: 256 largest: 96), free: 10064 (num: 1 largest: 10064) 11:33:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x2000000000000) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 11:33:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x4, 0x100) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0xfffffffffffffef5, [], 0x0, &(0x7f00000000c0), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="ec02ee00", @ANYRES16=r2, @ANYBLOB="100b29bd7000fedbdf2510000000880004003400070008000400ffffffff080001001f000000080001001b00000008000100030000000800030033bf0000080003000000000014000700080001001800000008000100120000000c00010073797a3000000000240007000800020020000000080001000400000008000300ff0f0000080004001c0000000c00010073797a30000000003000050014000200080002003203000008000300080000000800010069620000080001006962000008000100696200002400090008000200f8ffffff080002000000000008000200550f000008000200ff0700001800020008000100000000000800010001010000040004004400070008000100ffff00000c00030000800000000000000800020001ffffff08000100050000000800020005000000080002007b15ffff0c00030006000000000000003000020008000100040000000400040008000200800000000800010081000000040004000400040008000200ff070000400004003c00070008000400d000000008000400c5920000080004003f0000000800020000000100080003000000000008000200c800000008000200200000009c0001003c0002000800020008000000080001000200000008000100000000000800020010080000080004000400000008000300fbffffff0800010009000000380004001400010002004e20ffffffff0000000000000000200002000a004e2300010001fe8000000000000000000000000000aa02000000100001007564703a73797a31000000001400010069623a7465616d5f736c6176655f3000340001000800030000000000100001007564703a73797a3100000000100001007564703a73797a32000000000800030027000000600001004c000200080002000104000008000200000000000800010004000000080004000000000008000200050000000800020008000000080003008b61ac4908000400244d00000800010005000000100001007564703a73797a3100000000"], 0x2ec}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000600)=""/107) accept4$inet6(r1, &(0x7f0000000180), &(0x7f00000002c0)=0xfffffffffffffe55, 0x80800) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x5, 0x8}, {0x5, 0x3}, {0x400, 0x6}, {0x4, 0xfe35}, {0xe04, 0x2}, {0x0, 0x80}, {0x1, 0x4}, {0x58c8, 0x7fffffff}]}) [ 1455.239744] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1455.256456] binder_alloc: allocated: 2224 (num: 256 largest: 96), free: 10064 (num: 1 largest: 10064) 11:33:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffffffffffffff0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8f00633fc15ffd50"], 0x0, 0x0, 0x0}) 11:33:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x4, 0x210080) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000100)={0x0, 0x101, "2fba36b467b574b70156d75f820cc65e8a65f9dd9880b18bf7cfd4ec4f523e9a", 0x4, 0x5e20, 0x8001, 0x3f, 0x2, 0x2, 0x1c00, 0x101, [0x2, 0x4d0800000000, 0x5, 0x1]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1455.344869] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1455.344869] 11:33:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x105}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x134, r2, 0xb00, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xa8, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_BEARER={0x78, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x810) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) [ 1455.425941] binder_alloc: 25489: binder_alloc_buf size 2305843833847414784 failed, no address space 11:33:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x6, 0xff, 0x2, 0x0, 0x0, [{r0}, {r0, 0x0, 0x7c}]}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x4cc1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000480)=""/4096) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340415cce87afa7015941b4b2e60f32cf428440c9796630e821df5f9b621d89bb72be28ddb2fee125cfb4b1c4703db5501eb40d0f4c741ea5ed1d3ac53787b92ba21068fb08791e43f3c51924da9db04b75bd136cda65fad08bb829e209e5bcbf21df6b78e7848872b7fe39adae0e279232f3bd324fead4b8a54747ff5f7ba7cd6a06a58c4c14076fe3395c12467a7d8927f1ffbb225d5ee041c46b2577c4a93670"], 0x0, 0x0, 0x0}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x64000, 0x0) write$P9_RCLUNK(r1, &(0x7f00000001c0)={0x7, 0x79, 0x1}, 0x7) [ 1455.472951] binder_alloc: allocated: 2240 (num: 258 largest: 96), free: 10048 (num: 1 largest: 10048) [ 1455.491208] binder_alloc: 25489: binder_alloc_buf size 2305843833847414784 failed, no address space [ 1455.501024] binder_alloc: allocated: 2256 (num: 260 largest: 96), free: 10032 (num: 1 largest: 10032) 11:33:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) [ 1455.571138] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1455.599511] binder_alloc: allocated: 2256 (num: 260 largest: 96), free: 10032 (num: 1 largest: 10032) [ 1455.606661] binder: 19099:19104 unknown command 1094738688 11:33:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000004600)='security.SMACK64MMAP\x00', &(0x7f0000004640)='\x00', 0x1, 0x3) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x14020100) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e20, @remote}}, [0x8, 0x10000, 0x8, 0x6, 0x99, 0x80000001, 0x8001, 0x50d, 0x6, 0x4, 0x1, 0xbf8, 0x101, 0x5, 0x1552]}, &(0x7f00000015c0)=0x100) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000004780)=@assoc_value={r3, 0x5}, &(0x7f0000004740)=0xfffffffffffffcfc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000003ec0)={0x0, 0x9c, "d7b7d955b3a687cbbff4bee666ee259b84381c0d85ff22273732b62fcc241cd69f6edf7a5956f73bc334a14ecc7324964e4aefecf6c45addcb4e13ce490e89bba9ed29663b69a07bfb385031ef39ee4dd8ae8015701a9b9307b848fb9a32189fce898e055dac87611f7090a2d56326f814debe5c1bbf59c6109bf61b62d266a15a1a846014507bf7bc7613c0f4d431c6dcb4f852e0830b3b06f5c8f3"}, &(0x7f0000003f80)=0xa4) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000004680)={'ip6tnl0\x00', {0x2, 0x4e20, @multicast1}}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000004400)={0x0, 0x5e78, 0x0, 0x20, 0x98bc, 0x1000}, &(0x7f0000004440)=0x14) sendmmsg$inet_sctp(r1, &(0x7f00000044c0)=[{&(0x7f0000000100)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000280)="a330de39a5195e01fb356382bc757374a48669730020ba3fc0f6404b677e29dc5acf9b3ab5f9787c4109758feb242337a4f544abe0714d9aab8d159f8b62f4cd5a04b1a41034022509c91c84abec25d2b19b8d005bd589391c1861a7c52c064704c713850a639e9401888f71da7d476e06626b6544c007589383a07c76f86a84d4782c325a71ee29a18ba4f87ad016087ab30af3940b724ec4d3ebffe5c5986ce534b519cff9cd1b530754083266bd03e941c9ae92940282137a30a4b3835f3e65dfbcd2e89c9a8925916a6669", 0xcd}, {&(0x7f0000000140)="3839b0cde7ff0a7778b0d1639e9d60ecbffd90a5ae6b868c77fda786c8a46249bc61f151006d54a2e1398bcd025f7fffbd99afddf5d2eef5561e2ca150f507816581401d56351f2b7254e8f750278946b50d0ecc3fb7eedac4611ef0b3034023f8edf4f79352938804e9c83e77896b889948b1233f1bcc19ede4d23b1d6ac7f13044a02c5d4c87be8aed8d6c60110622847ae674af12f0a3daff46c5a9285a218a2c5ef79eaaac247ca4ed9e3b78f8fe", 0xb0}, {&(0x7f0000000380)="95b992deda8843fbc18ec483cfcb9e866b31299eccedf1f09754a992616b9c96153a8a5c3f47aab6c4361481b89817476c3426a01d8fc8ea7ff72052d6bbd7704f8ae46a3cc9b2e17c385e005cfe45fc91fc0126941c23869ec3b747e3f366599f54fc8578b67240ee6fbc1d1bb1e3edbf02c2fcf71e5cc83f99812a5dc56557e98d9486ea67a71b2f331586b96648ea35c8da97ea1a9730fbed2b3183dfb7", 0x9f}, {&(0x7f0000000480)="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", 0x1000}], 0x4, &(0x7f0000001600)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x7}, @sndrcv={0x30, 0x84, 0x1, {0xffffffffffffffc0, 0x7, 0x0, 0x5, 0x40, 0x1, 0x7fffffff, 0x3, r3}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @init={0x18, 0x84, 0x0, {0xffff, 0x1, 0x1f, 0x5}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0xb8, 0x80}, {&(0x7f00000016c0)=@in6={0xa, 0x4e20, 0x10001, @ipv4={[], [], @empty}, 0xb1}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000001700)="fb0f9936842a7449555e3804d4c58e1249314bff7e8f230934acdb9a6d784b77c32faba1d8231051bb8befe15d0d77b1c4d2eb00a861cca73f4fca6f1ed579c3e2892a71175ae9d44ab19014eb450b285191d73690c43d6f4f83be8416da96d1ec51d466563f5c1f6f2b9e4365e5f4c56c92adf96035e59aa0f5e5b9547a3b947484514679b0e18ff716c043630f90f689fe6fdfd82e2d3e34857f9c4942bcd131ef74404f06d9e5b8788d26630fe66207a146862998c4a3212c2ecb13bac5aa9c41177e379c679daeda30ff8f80", 0xce}, {&(0x7f0000001800)="839df8691570904db959fc43c311a9a1b7b23944", 0x14}, {&(0x7f0000001840)="ba1d3895ff5aa00f9ab2927162d517b10de4a0fcfc7c8b25913b9ef53ab9970d0043039fca40aac4c0f58e7d52bfe1165f2307b9aa", 0x35}], 0x3, &(0x7f00000018c0)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x4}}, @init={0x18, 0x84, 0x0, {0x8, 0x5, 0x0, 0x8}}], 0x30, 0x40000}, {&(0x7f0000001900)=@in={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000029c0)=[{&(0x7f0000001940)="9f77db713fcb84c69783d111063377593dd8c51d135d84922aa8c5ea81287ba3727ba531e5523b7e94240fbe93f6db1183ba62a71661af465a17e8b48e58cb744015383c2f9bd27ceda9097afb63a928411c9f13c99e124fd7ac1fc593a28569d1add5081f0391838e552804b734f231131f74eedb4ffd05c1fd250692e5", 0x7e}, {&(0x7f00000019c0)="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", 0x1000}], 0x2, &(0x7f0000002a80)=[@sndinfo={0x20, 0x84, 0x2, {0x3ff, 0x8, 0x6, 0x94c}}], 0x20, 0x19a65180ca209a06}, {&(0x7f0000002ac0)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000003e40)=[{&(0x7f0000002b00)="2bc762553c7dd40cc132ea1bd3a873a305f0927a126283b71279df93b185166abbc1b4d5181bccd331159b34dca2d3fc9fdb693d400a7abf986bf9c71686e1d3b8cbd97f6ac0cc076cee0c07ec34e3416028636c8b439a4cacafab1c3dc749e26a8449c669d2b037b3b15f47ac1095e75b3d3b24b7ae878987fbd0bc02578c56c63f26393319dcb9fe1894be57b7d38a410245b79a66c55c9980e465756d1a916abfaf8a2c2c4593feb9fbaefacf1fcc2b3b8ea82a34f95b284f549a3c5146af306a8cc4985559998b68dbc77578bffd601b0bd35c1af671230f3dfcf92aa6d96e", 0xe1}, {&(0x7f0000002c00)="7fdf16e65cbc25338427ad0db97578e1d5fa62fa2feede117a98920ac57f177a54d3b30e6cab06e6f11ec5b9c7df535a3a363ff4c7699bcab0560612518599c07f1bffca1ab63ffcbf62fefce4fb7c6acc8765be0144812ab7607f423bbc1fd73c661ddb41dc19aae3ba02c07c14555e57d4265f57ef34e7902974f5bf748c4d22a9", 0x82}, {&(0x7f0000002cc0)="d919352e123528e1a80222100761fe7f87c2c55154b679b8ad11ab5295a93074bd98a84ece651f04f60d420f39e4cfcf95aaf8e714475183b776132a366075c2c3b083239895679684953e8f4b91e7250f2c48c2c885f0ac56ad2b9d00f8a61066b3cd8735250775a8bca698f0325db68154170e92e868a06c1ee5b74897996b34194218bf1f39ae560c534f5b1ea796db801136a1f0a6cd2f803c243bab96a24a6a242eb4ba1dd8f88e3bc238c7c723f37d34c2e1f06a6252d463483833968df421cec9e4b1301dd084050bf55afdda0b0ad060d01db8b5655c63547466409e75", 0xe1}, {&(0x7f0000002dc0)="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", 0x1000}, {&(0x7f0000003dc0)="ef662be06db24b7c0f1a839b67c6503633c75dac6359a0060ce71d2485c4b9199f0e93f8b49087fd7da7fa3e726bb8ca6971454afcebe7616d927a89ff86555978ab4a61ff757e34db3d34f95ade9645aafbedb736511cb6e53f11071b21f525eef1fb1287d6b5b21de3", 0x6a}], 0x5, &(0x7f0000003fc0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @sndrcv={0x30, 0x84, 0x1, {0x3ff, 0x8, 0xc, 0xaba, 0x8, 0x81, 0x80, 0x6, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @local}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x1d}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x10001}], 0xb8, 0x51}, {&(0x7f0000004080)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000004380)=[{&(0x7f00000040c0)="ad39b384bfc1758f21d46c370c42c9c3a6cd2fa6654c1e8b55352ce0862d2c8a24842caf37e5467f9954feb2d9d50a7dbb170f8473f167f5178b492124ef26d382ef6c208b", 0x45}, {&(0x7f0000004140)="63c360054b19f01500c4642fcd7b5d15f8f26eb46dd8a7a307c036e56260ea84926d0804647c1d8d56d04130f29db996da287dedb970ecd9c9580515cc73cdb87ecf8c0cf66f3118", 0x48}, {&(0x7f00000041c0)="56b73f3d51a96b883bbbe28ed1c33345680b23419f5498685890f0858299fbbd2e0e616eca5a07ae91ea5a0bd21dc4cc6d524f9b01050937458563367c962e8f0049a7f414965a3f2be44034a88855276571149827189c6dd7d2", 0x5a}, {&(0x7f0000004240)="0adce116e26103dd5064cb042f8334a4c014a36a1d78be9fe1a2e14ce4f2b7c1b7f284af70a723e3219c5d6bbe619c426ff12e2e1be481f9c88a2e86be1c73d786123b6300539b2cbeaa5b1ad4cffbf86fb729975b28a484d825e4d15e5eb5e07c5cf6be527176a24619e277785fcbac72cf8104703e15ddb32e486f98a2b8f9ebda60485fd62707088d28be66", 0x8d}, {&(0x7f0000004300)="847f4288e18f75706f30dc2475852fe098afbff33a68f805d58c558c2e1ea663cf615f7e728edeac3123c4de32f6a6c2721100b88ca2728b8e408e2cb26dbcd4956745ccb7ca0a5cf3c14317326555", 0x4f}], 0x5, &(0x7f00000046c0)=ANY=[@ANYBLOB="20000000000000008400000002000000000008806c000000ffffff7f", @ANYRES32=r5, @ANYBLOB="180000000000000084000000060000000000005b00000000621a2fe1b680c8019876b251efba4223727aa175e7518ec96b12df0fce9cc42cdd7e188a972da556c15b07400294707391679403b57a49848cfbb95200139c58b2d004cf4ae1"], 0x38, 0x80}], 0x5, 0x4000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1455.615510] binder: 19099:19104 ioctl c0306201 20000440 returned -22 [ 1455.666556] binder: 19099:19113 unknown command 1094738688 [ 1455.677568] binder: 19099:19113 ioctl c0306201 20000440 returned -22 [ 1455.734874] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1455.749082] binder_alloc: allocated: 2256 (num: 260 largest: 96), free: 10032 (num: 1 largest: 10032) [ 1455.764759] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1455.775707] binder_alloc: allocated: 2256 (num: 260 largest: 96), free: 10032 (num: 1 largest: 10032) [ 1456.790163] net_ratelimit: 19 callbacks suppressed [ 1456.790169] protocol 88fb is buggy, dev hsr_slave_0 [ 1456.800276] protocol 88fb is buggy, dev hsr_slave_1 [ 1456.805344] protocol 88fb is buggy, dev hsr_slave_0 [ 1456.810434] protocol 88fb is buggy, dev hsr_slave_1 [ 1457.430148] protocol 88fb is buggy, dev hsr_slave_0 [ 1457.435291] protocol 88fb is buggy, dev hsr_slave_1 [ 1457.990181] protocol 88fb is buggy, dev hsr_slave_0 [ 1457.995297] protocol 88fb is buggy, dev hsr_slave_1 11:33:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000040)={{0xfffffffffffff2c2, 0x4, 0xfffffffffffffeff, 0x5, 0x7fff}, 0x3}) 11:33:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000400)=0x5) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = semget$private(0x0, 0x0, 0x308) semctl$IPC_INFO(r3, 0x2, 0x3, &(0x7f0000000140)=""/148) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x38) ptrace$cont(0x18, r4, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80000) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001480)='/dev/vcs\x00', 0x4000, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000014c0)={'dummy0\x00', {0x2, 0x4e23, @multicast2}}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x4, &(0x7f0000000340)=[{&(0x7f0000000180)="258e7004514f904391903f72d9568efa9042ecffb295c5e3aa6a5bb8789ab0490ef6a879d249337b0cb027", 0x2b, 0x4a0}, {&(0x7f0000000280)="9114f237e76fef5c2f3f890ea6b355deb180cbbab35a677fd17cd3f06ca91c7736336c8595e4542ea9bbb3aaedd09f204f8c676700749605e23c6823279a507010f27f92f8a49db7047d4f57c173ccda93f2eab4b10ddc6376299b652f3733df1125c7521ea19c57b27ed29dfb6db6730fad6ad23b45ffbf4c73d6e7e17d78409fc91da19000d55e64de5c3b7b1c0875bf3de765c9d51150cd2da4da9eac7fcc0ef2df6f419bf2facae22c68d919543e5b49a2b304", 0xb5, 0x7}, {&(0x7f00000001c0)="8deac7c691a197b13ae899ea6d216707ffdf3fb606addbe8d2ef9312259ddc3a22eef089ca69e37c0c728942da0d5c06dc", 0x31, 0xec70}, {&(0x7f0000000480)="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", 0x1000, 0x1}], 0x0, &(0x7f00000003c0)={[{@four_active_logs='active_logs=4'}, {@heap='heap'}, {@inline_xattr='inline_xattr'}, {@prjquota={'prjquota'}}, {@quota='quota'}, {@inline_dentry='inline_dentry'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@noinline_xattr='noinline_xattr'}], [{@permit_directio='permit_directio'}]}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000140)=@buf) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000001500)) 11:33:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0}) 11:33:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffffffffffffffff, 0x8200) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x2) 11:33:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0084612958a6190e27fe821175785b759edf515da3ab233570c18b487ad01fe80601ff3b1fe92bd573ce405bc637cf7a08c88e978fdb19abc1e72700c55d8324bb00000000000000"], 0x0, 0x0, 0x0}) [ 1458.230145] protocol 88fb is buggy, dev hsr_slave_0 [ 1458.230148] protocol 88fb is buggy, dev hsr_slave_0 11:33:44 executing program 3: syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) [ 1458.301846] binder: 19124:19129 unknown command 4 [ 1458.307292] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1458.318744] binder: 19124:19129 ioctl c0306201 20000100 returned -22 [ 1458.331317] binder_alloc: allocated: 2256 (num: 260 largest: 96), free: 10032 (num: 1 largest: 10032) 11:33:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e24, @remote}, {0x306, @local}, 0x6a, {0x2, 0x4e24, @broadcast}, 'veth0_to_bridge\x00'}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x726, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x41}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa7}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004041}, 0x4080) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r3) [ 1458.349094] binder: 19128:19137 unknown command 694256640 [ 1458.364616] binder: 19128:19137 ioctl c0306201 20000440 returned -22 [ 1458.381137] binder: 19124:19145 unknown command 4 [ 1458.387525] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x204f943) 11:33:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000180)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x2300, 0x0) write$P9_RFSYNC(r1, &(0x7f0000000100)={0x7, 0x33, 0x2}, 0x7) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000140)=0x8) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000080)=[r1]) [ 1458.389392] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1458.389392] [ 1458.429573] binder: 19124:19145 ioctl c0306201 20000100 returned -22 [ 1458.436831] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock 11:33:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000e80)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x0, &(0x7f0000000ec0), &(0x7f0000000f00)=0x4) [ 1458.485444] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1458.505412] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1458.514512] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x204f943) [ 1458.539517] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1458.555557] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1458.569343] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock 11:33:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1458.586114] binder: 19164:19168 ioctl 80086601 20000180 returned -22 [ 1458.616275] Unknown ioctl 1074029585 [ 1458.625606] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1458.639063] binder_alloc: allocated: 2272 (num: 262 largest: 96), free: 10016 (num: 1 largest: 10016) [ 1458.684678] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1458.703605] binder_alloc: allocated: 2272 (num: 262 largest: 96), free: 10016 (num: 1 largest: 10016) [ 1458.715500] binder: 19164:19185 ioctl 80086601 20000180 returned -22 [ 1458.722748] Unknown ioctl 1074029585 11:33:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000400)=0x5) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = semget$private(0x0, 0x0, 0x308) semctl$IPC_INFO(r3, 0x2, 0x3, &(0x7f0000000140)=""/148) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x38) ptrace$cont(0x18, r4, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80000) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='io\x00') r2 = geteuid() fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000180)="01d0f7511648b72e856229e247bcf9e0507009cd9c5237a66f3a7a42e7c0d5ca12cffa38") mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x1048000, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfffffffffffffff8}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x100}}]}}) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 11:33:47 executing program 4: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200083, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) r1 = accept$inet6(r0, 0x0, &(0x7f0000000100)=0xfffffffffffffe92) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000680)=0x2, 0x4) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000001400)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000009f00000048b4f6f68a886769485aff0808c869b96c8b0b0f32e92604635db8d9eb6eda51f1dddff4c9a4e0652f1c5a27ba0715ba76ace96a68065b0cc350d5258127dd905f13e9019cd06fb2c56485db4ecaf4ad37ca0c8983bac03b390aedc03d55f93d7b27dedd9f95e317d2b57eae278aa743d5aeeea569b70a06a984e5c97fbfd4b5a4ab5c836b997ad9b2d95c0f98a63ebdf7a4960d8d3b46931ad93bd000233b"], 0x0) listen(0xffffffffffffffff, 0x4) r2 = getpgrp(0xffffffffffffffff) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0xa000000000000015) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x937ebd83c8effd77, 0x0, &(0x7f0000000280)) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000040)={{0x2, 0x4e20, @multicast2}, {0x7, @dev={[], 0x25}}, 0x22, {0x2, 0x4e20, @empty}, 'caif0\x00'}) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000780)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)={'team0\x00', r5}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x2ee, 0x0, 0x0}) 11:33:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e23, 0xcdcc, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000080ea6b4410a240"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000340)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000400)={r2, 0x3}) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x3, 0x400000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000100)="7500fee09e5a0ee0036c43ae0a096974038a36d9371fd8215898be9d7a7fb6d98bb1a5c80d0b181f4842d8692775c8ccce1cac22894bfbef816876f5215a21337d6221a4dbc4aa5da6a361156ed6c2be105938463c588b355b406eef654101a7ae28910fa0cd031a", &(0x7f0000000280)="bfbcc16ce71335c499bd2c46e988b479716d57a30a220205cedd123c8ca6ef1bccf25487d51d0ef913a01cc4ae6c54cb8bb3a2e64c02a7eb8ab6dc5da7aba55182dc56ee540c0c078dac84dc406af50e50ff4967022c9705ef7c43ebbef0e8a9c79a684d23e44648eb918890357ac13614b5ac35004c519d127a1efc8f03d936d224ea1b5b108613959ddac24b6cde8a6961a8c0da69cfdb9da6fd6d9acdf764c50e4175c30f9d348e0d972bb1b8a10d1be0c1e3032385332d3c5197ff26", 0x4}, 0x20) 11:33:47 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) write$selinux_context(r0, &(0x7f0000000040)='system_u:object_r:modules_conf_t:s0\x00', 0x24) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000022670000004925cac271c678fedb000000000000000000"]) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) fsetxattr$security_capability(r0, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000200)=@v2={0x2000000, [{0x66bb, 0x7ff}, {0x1f, 0x8}]}, 0x14, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0x6, 0x6, 0x0, 0x0, 0x6, 0x80000001, 0xfff, 0x0, 0x8, 0x7, 0x7fffffff, 0x0, 0xffffffffffffff7f}, {0x5, 0x0, 0x80, 0x3f, 0x4, 0x5, 0x1, 0x5, 0x1, 0x10001, 0x5, 0x1, 0xfffffffffffffff8}, {0x5, 0x0, 0x2, 0x3f, 0x8, 0x9, 0x401, 0x48000000, 0xcdad, 0x76b, 0x2, 0x400, 0x8000000000000}], 0xd4a}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-control\x00', 0x200, 0x0) [ 1461.328407] binder: 19191:19194 unknown command -360710144 [ 1461.347937] binder: 19188:19195 unknown command 808482864 [ 1461.351165] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1461.367376] binder: 19188:19195 ioctl c0306201 20000440 returned -22 11:33:47 executing program 3: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x4004) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) [ 1461.367681] binder: 19191:19194 ioctl c0306201 20000440 returned -22 [ 1461.385696] binder: 19191:19205 ioctl c00c642d 20000340 returned -22 [ 1461.394584] binder_alloc: allocated: 2272 (num: 262 largest: 96), free: 10016 (num: 1 largest: 10016) [ 1461.418742] binder: 19191:19194 unknown command -360710144 [ 1461.426924] binder: 19191:19194 ioctl c0306201 20000440 returned -22 [ 1461.449544] binder: 19191:19205 ioctl c00c642d 20000340 returned -22 [ 1461.454527] binder: 19188:19213 unknown command 808482864 [ 1461.466369] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1461.476251] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1461.476251] 11:33:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x400000, 0xffffffff}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vga_arbiter\x00', 0x48000, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000600)=@assoc_id=0x0, &(0x7f0000000640)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000680)={r2, @in6={{0xa, 0x4e20, 0x1, @mcast1, 0x1}}, 0x7f, 0x1}, 0x90) 11:33:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x8200, 0x3) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000100)=0x5, 0x4) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000140)={{0x6499, 0xec}, {0x96, 0x1}, 0x6, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1461.496566] binder: 19188:19213 ioctl c0306201 20000440 returned -22 [ 1461.511073] binder_alloc: allocated: 2272 (num: 262 largest: 96), free: 10016 (num: 1 largest: 10016) 11:33:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 11:33:47 executing program 3: semget$private(0x0, 0x20000000001, 0x206) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) [ 1461.665648] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1461.682038] binder_alloc: allocated: 2272 (num: 262 largest: 96), free: 10016 (num: 1 largest: 10016) [ 1461.696012] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1461.711885] binder_alloc: allocated: 2272 (num: 262 largest: 96), free: 10016 (num: 1 largest: 10016) [ 1461.715725] binder: BINDER_SET_CONTEXT_MGR already set [ 1461.727456] binder: 19234:19243 ioctl 40046207 0 returned -16 [ 1461.731851] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1461.744714] binder_alloc: allocated: 2272 (num: 262 largest: 96), free: 10016 (num: 1 largest: 10016) [ 1461.765902] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1461.775771] binder: BINDER_SET_CONTEXT_MGR already set [ 1461.790824] binder_alloc: allocated: 2272 (num: 262 largest: 96), free: 10016 (num: 1 largest: 10016) [ 1461.793411] binder: 19234:19246 ioctl 40046207 0 returned -16 [ 1462.150140] net_ratelimit: 20 callbacks suppressed [ 1462.155217] protocol 88fb is buggy, dev hsr_slave_0 [ 1462.160285] protocol 88fb is buggy, dev hsr_slave_1 [ 1462.390141] protocol 88fb is buggy, dev hsr_slave_0 [ 1462.390144] protocol 88fb is buggy, dev hsr_slave_0 [ 1462.390186] protocol 88fb is buggy, dev hsr_slave_1 [ 1462.395228] protocol 88fb is buggy, dev hsr_slave_1 [ 1463.030192] protocol 88fb is buggy, dev hsr_slave_0 [ 1463.035322] protocol 88fb is buggy, dev hsr_slave_1 [ 1463.040490] protocol 88fb is buggy, dev hsr_slave_0 [ 1463.045739] protocol 88fb is buggy, dev hsr_slave_1 11:33:50 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000400)=0x5) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = semget$private(0x0, 0x0, 0x308) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000140)=""/148) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x38) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80000) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 11:33:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = accept4(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x80, 0x800) accept4(0xffffffffffffffff, &(0x7f0000000180)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000200)=0x80, 0x80800) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000280)={@mcast2, @remote, @dev={0xfe, 0x80, [], 0x10}, 0x2, 0x4, 0x2, 0x500, 0x3, 0x520200, r2}) 11:33:50 executing program 3: syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x2000) 11:33:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:50 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0xf135, 0xa80) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x20082) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000200)={'brou\xf4e\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\xe8\xc3?\x96\xff\x19^l\xaa\x00', 0x0, 0x0, 0x0, [], 0x382, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x408000, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\b\x00\x00\x00'], 0x0, 0x0, 0x0}) 11:33:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 11:33:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rfcomm\x00') connect$x25(r0, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) [ 1464.381284] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1464.421039] binder_alloc: allocated: 2272 (num: 262 largest: 96), free: 10016 (num: 1 largest: 10016) 11:33:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f00000000c0)='/dev/binder#\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x2, &(0x7f0000000280)={'trans=xen,', {[{@access_uid={'access', 0x3d, r1}}], [{@fsmagic={'fsmagic', 0x3d, 0x101}}, {@obj_role={'obj_role', 0x3d, '/dev/binder#\x00'}}, {@appraise_type='appraise_type=imasig'}]}}) [ 1464.453654] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1464.453654] 11:33:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x200, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1464.509811] binder: 19269:19280 unknown command 8 11:33:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x400, 0x20002) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000)=0x1f, 0x4) recvfrom$rose(r1, &(0x7f0000000040), 0x0, 0x102, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) [ 1464.547426] binder: 19269:19280 ioctl c0306201 20000440 returned -22 [ 1464.625553] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1464.639958] binder_alloc: allocated: 2304 (num: 266 largest: 96), free: 9984 (num: 1 largest: 9984) [ 1464.666419] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1464.676552] binder_alloc: allocated: 2304 (num: 266 largest: 96), free: 9984 (num: 1 largest: 9984) [ 1467.190151] net_ratelimit: 19 callbacks suppressed [ 1467.190156] protocol 88fb is buggy, dev hsr_slave_0 [ 1467.200214] protocol 88fb is buggy, dev hsr_slave_1 [ 1467.205295] protocol 88fb is buggy, dev hsr_slave_0 [ 1467.210358] protocol 88fb is buggy, dev hsr_slave_1 11:33:53 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x100000000000) r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000140)={{0x0, 0x3, 0x6, 0x3, 0x100000000000000}, 0x401, 0x7, 0x2000400000}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x400000000000000, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x2000000, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="8e8411387304ff71d94ce70968a88a51cfb93bb8975d8e0799b174d20f60701a5d6845bc776407b867d9eac5f1d12b075dcd667cb5f26b32aa1e22de6ffc47b12329ff81533b129aa4aa3031ceed020f972a44e75b2ad988660d408a972b4fb47d113a58d869bc2b0bd16ecc1c81f3390a52df90e03797dc9e3d0af204002c4fa79910034ba5679204daaa38e39ef36bf64e876eb03467cc6642fc875998d046f0e69473fb1ceea7882e41ff5363e7567f6e9dd34bab8b86c5be552eee95e0882d76a017f6f4daf3fd15ed692993fe3e5baec24cc12fa8a199bb8f763e00"], 0x0, 0x0, 0x0}) fsetxattr$security_evm(r1, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="050304000000000900a1527ce68480e2cb9394db719444b91d09787ae357b90f65d68a252c9f38a8f64bede57653be109edf6b6da895e6c5b25ffae0d74d78925411e4c83665103c861ca5b4d88338b9c59ffa6b4d312d32f2701e54a52a6eb3ccc841044ef50fa9f39c9baae14ac43f868c96be1756ce70324a81a0a44f28500b0b06d5ccdc53df9646f9665d3e4dbc53910904cf727404d34a959a38d93c574a56fb9541f8e75ea0219c"], 0x1, 0x3) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x6, 0x20100) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000280)={{0x2, 0x4e21, @multicast2}, {0x306, @dev={[], 0x17}}, 0x6c, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6gretap0\x00'}) 11:33:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x4001) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0xe, 0x80800) recvfrom(r1, &(0x7f0000000100)=""/67, 0x43, 0x2141, &(0x7f0000000180)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2000000000) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0xa, 0x8]) 11:33:53 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000400)=0x5) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = semget$private(0x0, 0x0, 0x308) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000140)=""/148) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x38) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80000) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) 11:33:53 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x81, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x2) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = geteuid() setuid(r2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x8000, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000100), 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000002409c0c842e32cda72e17bd7ed091870790d8883a565753a4d7dafb5f6c7b203335221057fa4db1ce37295230404f2ecf573ff1da883c01cde2e55e36b95243466521e6e0f45dae19797a3c1371c2dbb7f1a573410cdd307924c12047ed32bfc2a12c101e48c9a20053958247ffa6"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000180)) 11:33:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 11:33:53 executing program 4: ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) [ 1467.423721] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1467.443224] binder_alloc: allocated: 2304 (num: 266 largest: 96), free: 9984 (num: 1 largest: 9984) [ 1467.465292] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1467.476824] binder_alloc: allocated: 2304 (num: 266 largest: 96), free: 9984 (num: 1 largest: 9984) 11:33:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) fsync(r0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x100, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000040)={0xd325, 0x101}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000100)={0xf4, 0x1c, [0x3, 0x9659, 0x62b0, 0x0, 0x0, 0x3, 0x3ff]}) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0)=0x1, 0x4) [ 1467.516461] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1467.550223] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1467.550223] 11:33:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040a7d908be881c8cb531b688070000007692152eb974eaaf79a16f317d17e9b7c8575f491c2e49abe86693deb8c661ae8b74a381c90811f4f54be254cdde206332be1f51c03fd942f2b21b6319c30feb550c7e2c720808baef5b83cf89f877f075d501950a114977ebff1a83f0a443fef073e594baf9a64e9b6962a3bba2f8760910d0011b7efc1fc0e35b4d1793f31cf65e77b448e035080c2ec30e73b1010000000000000000"], 0x0, 0x0, 0x0}) [ 1467.578079] binder_alloc: allocated: 2304 (num: 266 largest: 96), free: 9984 (num: 1 largest: 9984) [ 1467.580525] binder: 19325:19334 unknown command 1073872896 11:33:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2800) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000280)={0x2, 0x0, 0x2080, {0x7000, 0x1003, 0x1}, [], "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", "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"}) 11:33:53 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x600941, 0x101) fremovexattr(r0, &(0x7f0000000080)=@known='user.syz\x00') r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x8001, 0x40) [ 1467.626611] binder: 19325:19334 ioctl c0306201 20000440 returned -22 11:33:53 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x81, 0x103000) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000040)={0x0, 0x1000, 0x2, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) [ 1467.684749] binder: 19325:19340 unknown command 1073872896 [ 1467.691238] binder: 19325:19340 ioctl c0306201 20000440 returned -22 [ 1467.702320] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:33:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x12180, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x1, 0x0, [], 0x0, &(0x7f00000000c0), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:33:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000000c0)='/dev/binder#\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) setsockopt(r3, 0x10001, 0x3, &(0x7f0000000280)="fdfe777e2bebdd6810030ba040f40cb2f4861c440020dc5a245f75709e6b41a6ed40a4d1ace0483c5baa339cd22d5f269d4e4053fd0c3a18c85caedb151b7bb0427e06be017868532a5263b499268e8032637002dfa008aceb937e1347d7557fd825e651cea99622e123c665417c167088030149a58fa54c342290624a9b047e189117d6b0a28dc64467ae4e5d7341be6f0dd72f8c95bf502a48702e0877ced69f15fdb8f80dc438b4d0197e21d7633af1400bb9", 0xb4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) [ 1467.732639] binder_alloc: allocated: 2304 (num: 266 largest: 96), free: 9984 (num: 1 largest: 9984) [ 1467.760196] binder: 19344:19355 ioctl 4080aebf 20000280 returned -22 [ 1467.802194] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1467.812773] binder: 19344:19355 ioctl 4080aebf 20000280 returned -22 [ 1467.822644] binder_alloc: allocated: 2304 (num: 266 largest: 96), free: 9984 (num: 1 largest: 9984) [ 1467.839842] binder_alloc: 25489: binder_alloc_buf size 2305843833847414784 failed, no address space [ 1467.850007] protocol 88fb is buggy, dev hsr_slave_0 [ 1467.850586] protocol 88fb is buggy, dev hsr_slave_1 [ 1467.863846] binder_alloc: allocated: 2304 (num: 266 largest: 96), free: 9984 (num: 1 largest: 9984) [ 1468.390176] protocol 88fb is buggy, dev hsr_slave_0 [ 1468.396259] protocol 88fb is buggy, dev hsr_slave_1 [ 1468.630188] protocol 88fb is buggy, dev hsr_slave_0 [ 1468.635296] protocol 88fb is buggy, dev hsr_slave_1 11:33:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x2c0500, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0xffffffffffffffe0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{0x2004, 0xf000, 0xb, 0x7, 0x3, 0x2, 0xcbb2, 0x10000, 0x81, 0x0, 0xfe2d, 0x4}, {0x1000, 0x7000, 0xf, 0x800, 0xfffffffffffffffc, 0x5cd08431, 0x6, 0x7, 0xb694, 0xfffffffffffff801, 0x1, 0x5}, {0x6002, 0x4000, 0xc, 0x5, 0x56d, 0xffffffff, 0xffff, 0x0, 0x9, 0x100, 0x0, 0xfb8}, {0x5000, 0x4000, 0xd, 0x6, 0x7fff, 0x1, 0x2, 0x8, 0x100, 0x0, 0x3f, 0x3}, {0x7000, 0x1000, 0x0, 0x4a8, 0x1, 0x0, 0x7ff, 0x1ff, 0xffffffffffffff12, 0x634, 0x3f, 0xff}, {0x3000, 0xf000, 0xf, 0x4, 0x1, 0x3ce6, 0x3, 0xe, 0xcb, 0x80, 0x21, 0x1000}, {0x106000, 0x3000, 0x0, 0x2, 0x7ff, 0xfffffffffffffffb, 0x8000, 0x39, 0x9, 0x8, 0x2, 0x62}, {0x0, 0xd000, 0xa, 0xfec, 0x1, 0xffffffffffffffff, 0x40, 0x7, 0x8001, 0x54, 0xbf29, 0x9}, {0x4001}, {0xd000, 0x7000}, 0x20000000, 0x0, 0x100000, 0x1, 0x5, 0x4900, 0x10000, [0x9, 0x9, 0x400, 0x2]}) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000100)=0x9) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r1, 0x4) 11:33:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000040)=0x4) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 11:33:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00C@@'], 0x0, 0x0, 0x0}) 11:33:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x4000, 0x0) ioctl$TCGETX(r1, 0x5432, &(0x7f0000000100)) 11:33:56 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000400)=0x5) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = semget$private(0x0, 0x0, 0x308) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000140)=""/148) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x38) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80000) 11:33:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000050d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x40, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{0x9, 0x9, 0x10000, 0xffffffffffffffe1}, 'syz1\x00', 0x16}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x10d400, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340409a3fd23ec9c2b57e0726bee342800695ef658c996ecbd4b1f64512b4c37a14c33dd38590f16bc3d063b96d5e1c261f9a25f6d5a09746"], 0x0, 0x0, 0x0}) 11:33:56 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0xffff, 0x10000) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x2, 0xffffffff, 0x800000000}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 11:33:56 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x60) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000180)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r1}) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000280)=""/162, &(0x7f00000001c0)=0xa2) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) 11:33:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00k@F'], 0x0, 0x0, 0x0}) 11:33:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @bcast}, [@default, @remote, @rose, @rose, @netrom, @remote, @default]}, &(0x7f0000000140)=0x48, 0x800) accept4(r1, &(0x7f00000002c0)=@nfc_llcp, &(0x7f0000000280)=0x80, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1470.483186] binder: 19373:19379 unknown command 1077953280 [ 1470.512480] binder: 19373:19379 ioctl c0306201 20000440 returned -22 11:33:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x2, 0x100) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) [ 1470.559587] binder: 19373:19398 unknown command 1077953280 [ 1470.563854] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1470.563854] [ 1470.566432] QAT: Invalid ioctl [ 1470.593428] binder: 19373:19398 ioctl c0306201 20000440 returned -22 [ 1470.620423] binder: 19396:19405 unknown command 1178626816 [ 1470.645794] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1470.663688] QAT: Invalid ioctl 11:33:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [], 0x423, &(0x7f0000000000), 0x0}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0xb7, 0x8280) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000380)={0x7d, 0x0, [0x0, 0xda, 0xba]}) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x8, 0x400000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000001c0)={0x5, 0x4338, 0x2, 'queue0\x00', 0xffffffff00000001}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000100)={0x5, 0x0, {0xffffffffffffffff, 0x0, 0xffffffffffffffc1, 0x0, 0x79d}}) ioctl$KDSKBLED(r3, 0x4b65, 0x800000000) setsockopt$sock_void(r3, 0x1, 0x1b, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) 11:33:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x801, 0x2e) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000000c0)={0x0, 0xe879752, 0x0, 0x7, 0x4, 0x81}) io_setup(0x1ff, &(0x7f0000000000)) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x480) 11:33:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0xb, 0x2000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x80000, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x773226f9f5194561, [], 0x0, &(0x7f0000000100), 0x0}, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2, 0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0}) [ 1470.664895] binder: 19396:19405 ioctl c0306201 20000440 returned -22 [ 1470.676327] QAT: Invalid ioctl [ 1470.678143] binder_alloc: allocated: 2336 (num: 270 largest: 96), free: 9952 (num: 1 largest: 9952) [ 1470.684000] QAT: Invalid ioctl [ 1470.697251] binder: 19396:19412 unknown command 1178626816 [ 1470.711869] binder: 19396:19412 ioctl c0306201 20000440 returned -22 11:33:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = socket$inet(0x2, 0x80f, 0xffffffff) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x1000002b3) r6 = dup2(r5, r5) getsockopt$inet_int(r4, 0x0, 0x1b, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="25a8cfac480cd16b6621ad05aa2a2d07124dea9e84542a66beb37200a36170ea82db6b969f15dbd105db3519121f5b0e89"], 0x1}}, 0x44801) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x20010, 0xffffffffffffffff, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000680)={0x0, 0xfffffffffffffebb, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYRESHEX, @ANYRES64=r5, @ANYRES16=r5]}, 0x1, 0x0, 0x0, 0x800}, 0x800) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) mincore(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x0) mq_open(&(0x7f0000000180)='\x00', 0x1, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) r7 = socket$inet_sctp(0x2, 0x800000000001, 0x84) listen(r7, 0x11000000000b) bind$bt_rfcomm(r3, &(0x7f0000000100)={0x1f, {0x0, 0x40, 0x9, 0x9, 0x800, 0x4e8}, 0x100000001}, 0xa) io_setup(0x1, &(0x7f0000000300)) ioctl$TIOCLINUX7(r6, 0x541c, &(0x7f00000000c0)={0x7, 0x441d}) [ 1470.834311] binder: 19418:19427 unknown command 3 [ 1470.851567] binder: 19418:19427 ioctl c0306201 20000440 returned -22 [ 1470.878996] binder: 19418:19433 unknown command 3 [ 1470.920083] binder: 19418:19433 ioctl c0306201 20000440 returned -22 [ 1472.550151] net_ratelimit: 20 callbacks suppressed [ 1472.555277] protocol 88fb is buggy, dev hsr_slave_0 [ 1472.560380] protocol 88fb is buggy, dev hsr_slave_1 [ 1472.790182] protocol 88fb is buggy, dev hsr_slave_0 [ 1472.790185] protocol 88fb is buggy, dev hsr_slave_0 [ 1472.790228] protocol 88fb is buggy, dev hsr_slave_1 [ 1472.795272] protocol 88fb is buggy, dev hsr_slave_1 11:33:59 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000400)=0x5) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = semget$private(0x0, 0x0, 0x308) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000140)=""/148) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x38) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) 11:33:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) r2 = getegid() setregid(r1, r2) 11:33:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0xc0000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f00000000c0)={0x2, 0x1000, 0x8, 0x0, 0x0, [], [], [], 0x1, 0x4}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x4004113, r0, 0x0) 11:33:59 executing program 5: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x802) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101040, 0x0) connect$netrom(r0, &(0x7f0000000140)={{0x3, @default, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) [ 1473.430149] protocol 88fb is buggy, dev hsr_slave_0 [ 1473.435398] protocol 88fb is buggy, dev hsr_slave_1 [ 1473.440547] protocol 88fb is buggy, dev hsr_slave_0 [ 1473.445715] protocol 88fb is buggy, dev hsr_slave_1 11:33:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 11:33:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0xfffffffffffffe1e, 0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x400000, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000100)) [ 1473.513043] binder: 19443:19447 unknown command 0 [ 1473.518962] audit: type=1400 audit(1564486439.346:125): avc: denied { map } for pid=19441 comm="syz-executor.4" path="/dev/dri/card0" dev="devtmpfs" ino=190 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:dri_device_t:s0 tclass=chr_file permissive=1 [ 1473.547950] binder: 19445:19449 ioctl c0306201 20000440 returned -14 11:33:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x1000000000000) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="007f5c34"], 0x0, 0x0, 0x0}) 11:33:59 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x100, 0x4, [0x1]}) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:33:59 executing program 3: syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x4) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x9) wait4(r0, &(0x7f0000000000), 0x61000008, &(0x7f0000000040)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x10000, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) [ 1473.560154] binder: 19443:19447 ioctl c0306201 20000440 returned -22 [ 1473.576288] binder: 19445:19457 ioctl c0306201 20000440 returned -14 11:33:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_getevents(r2, 0x58, 0x2, &(0x7f0000000100)=[{}, {}], 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x1a8, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYRES32=r2, @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000680)=ANY=[@ANYRES64=r2, @ANYRES64, @ANYRES32=r1, @ANYRES32=r0, @ANYRES64=r0, @ANYRES16=r2, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYPTR64, @ANYRESDEC=r1, @ANYRESHEX=r1], @ANYRES32=0x0], @ANYPTR64, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64=r1, @ANYRESOCT=r2, @ANYBLOB="088fbe2f34fe521fb697382c5046164f9d94353de43209fb7d50adfa0097543788a6098e8e6c6698effd92e9bc27cd493e0e3b3177a62e2be868f82983ee36418ec2c7a72011dae6c21db9b4960b91221a080feadf", @ANYRES64=r0, @ANYRES64=r2, @ANYRES64=r0, @ANYBLOB="32fd608a1540839fdc1be70c472b1fd8caeee3b98d7de0a6c803e26ae06a6818c7b39e8d38821055ffa47f3446949c5d79aae2bfe75e0ac289ce7547fd9f50781c339ec32473388722553ee02c67ff922699e6f93f7024b0e046ac1c7e4195e36fa1c995d95609f4fd652428b5408ce3982a7e4e9ddb29993f86cf5e9968b1dea33635ed4c2ce14d546a1865125c074f1d097ff7a7314693dbe148ad04e53ed29b26170d2bc90796b4167840fdae255f3421e5c2101651d2a06fcd8a12359fbf2dd7d93d76b2724dda84279317d1d1a19c2509", @ANYRESHEX=r2, @ANYBLOB="0c0a61f86bfe428986de0608faaf925e1b6239d29c7cf3275679acaff40a4974da8e7f9dceb5ced1ff603167f621392e8368a8eb4cc63811ec08ece796eb9dfb8bc49b66be009c81fa45f13c4107fdbe9d1f151cf19c18759d5f576f262b2f2a9454b0fd441f32ab638455d703a94cabe0ba1f6c0af9ee3c1feb26d62f0f25debc865f", @ANYPTR64], @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYPTR, @ANYBLOB="d46a8e6eed27eae5c9b30a6fdef2b679cef26cde7ea18a0a702115c3cafdfa20ea3a531ad09abe504e04dda434b9430626cdac54a5dae890bb385310a8d6f29cb72d9d66471f64ce19f69c2a52c7b17f1e41fd6f162bcfc5854fc1e868e83bf054528ef84f938b77f5794dcf646cfa0f4bcc562cfc3f7cbab1638b73bb5507c315a6486327a26a8584a97cd6f2d7b3efd7f8b323f1f801d07a46470c10e4db44515fc37823b5dab2e7d7cc7cb1df62f7b88e650b0fb17adb339fa9db067ed052126a44c9d3d69836a6caade3aee965c5f534002be2ddc311aef3"]]], 0x0, 0x0, 0x0}) 11:33:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1473.628656] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1473.628656] [ 1473.693353] binder: 19462:19470 unknown command 878477056 [ 1473.709877] binder: 19462:19470 ioctl c0306201 20000440 returned -22 [ 1473.728572] binder: 19462:19480 unknown command 878477056 11:33:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40, 0x0) [ 1473.741515] binder: 19462:19480 ioctl c0306201 20000440 returned -22 [ 1473.767770] binder: 19477:19482 unknown command 4 [ 1473.793786] binder: 19477:19482 ioctl c0306201 20000440 returned -22 11:34:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xffffffffffffffe1, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:02 executing program 4: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ubi_ctrl\x00', 0x101000, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000580)='/dev/snd/pcmC#D#c\x00', 0x7d211eb3, 0x7fffffffe) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x1fff, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='net/udplite\x00') r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000540)='/dev/audio\x00', 0x100, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x10000, 0x444002) r1 = openat$cgroup_ro(r0, &(0x7f0000000500)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000040)={0xab, &(0x7f00000000c0)="6b0c20d432e15a898a3e03923476b934be5e6db78edd412d23c27b7db241100af89ae08b1c05860eb3d34212fc3023fd39c1c1ca28c771ed83e44034e8b7703411f449f54fbbd8a62de8426a7141aa195693f9da9b4f429400febedab92f7e57e7ba194cbf8d29596e0a98f2ff25fa4e685c04a5707442eb858e743cabae441d94962027648ba4f4b63a35817af1b69bd95af3007b15f4aab215d717b8b6c2ab65252d0190e7fd9ec78109"}) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) 11:34:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00I@H'], 0x0, 0x0, 0x0}) 11:34:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x74, 0x0, &(0x7f0000000340)=[@acquire={0x40046305, 0x2}, @release, @enter_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/168, 0xa8, 0x1, 0x3b}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/118, 0x76, 0x0, 0x15}, @flat=@handle={0x73682a85, 0x1, 0x2}}, &(0x7f0000000300)={0x0, 0x28, 0x50}}}, @acquire_done={0x40106309, 0x1}], 0x0, 0x0, &(0x7f00000003c0)}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:02 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000400)=0x5) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = semget$private(0x0, 0x0, 0x308) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000140)=""/148) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x38) ptrace$cont(0x18, r3, 0x0, 0x0) 11:34:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 11:34:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063408f7fd9b6dff38c6b5ebf0f1ab04a9614305978b7665575c808db0000"], 0x0, 0x0, 0x0}) 11:34:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x640400, 0x0) recvfrom$rose(r1, &(0x7f0000000040)=""/188, 0xbc, 0x10001, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 11:34:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) mlockall(0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x1) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000040)=""/12) [ 1476.547348] binder: 19497:19500 unknown command 1212172544 [ 1476.567853] binder: 19497:19500 ioctl c0306201 20000440 returned -22 11:34:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000280)={0xfffffffffffffffa, 0x4, 0x100, 0x2, &(0x7f0000000100)=[{}, {}, {}, {}]}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:02 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x8480, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x104, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1476.617083] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1476.617083] 11:34:02 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x800) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r1, @in={{0x2, 0x4e23, @loopback}}, 0x8, 0x7, 0x5, 0xf, 0xa}, &(0x7f00000001c0)=0x98) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000001680)={0x6, &(0x7f0000000280)=""/6, &(0x7f00000015c0)=[{0x6, 0x37, 0xac0000, &(0x7f00000002c0)=""/55}, {0x7, 0xdd, 0x100, &(0x7f0000000300)=""/221}, {0x4, 0xe, 0x0, &(0x7f0000000400)=""/14}, {0x6, 0xb7, 0x1000, &(0x7f0000000440)=""/183}, {0x6, 0x8f, 0x2, &(0x7f0000000500)=""/143}, {0x1, 0x1000, 0x4, &(0x7f00000005c0)=""/4096}]}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000200)=0x56b3) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) [ 1476.716635] binder: 19521:19531 unknown command -1891605760 [ 1476.743358] binder: 19521:19531 ioctl c0306201 20000440 returned -22 [ 1476.752739] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:34:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)={r2, 0x4}) setfsuid(r1) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) [ 1476.752749] binder_alloc: allocated: 2400 (num: 278 largest: 96), free: 9888 (num: 1 largest: 9888) [ 1476.767591] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1476.786841] binder_alloc: allocated: 2400 (num: 278 largest: 96), free: 9888 (num: 1 largest: 9888) [ 1476.796377] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:34:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x72002, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000100)=""/105) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3a2, 0x0, &(0x7f0000000180)=ANY=[], 0x1ed, 0x0, 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r1, 0x10, &(0x7f00000001c0)={&(0x7f0000000180)=""/53, 0x35}}, 0x10) 11:34:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 11:34:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) [ 1476.814425] binder: 19521:19539 unknown command -1891605760 [ 1476.828713] binder_alloc: allocated: 2400 (num: 278 largest: 96), free: 9888 (num: 1 largest: 9888) [ 1476.842185] binder: 19521:19539 ioctl c0306201 20000440 returned -22 [ 1476.923247] binder: 19547:19551 unknown command 0 [ 1476.928922] binder: 19547:19551 ioctl c0306201 20000440 returned -22 [ 1476.942113] binder: 19547:19551 unknown command 0 [ 1476.947940] binder: 19547:19551 ioctl c0306201 20000440 returned -22 [ 1477.600155] net_ratelimit: 20 callbacks suppressed [ 1477.600161] protocol 88fb is buggy, dev hsr_slave_0 [ 1477.610197] protocol 88fb is buggy, dev hsr_slave_1 [ 1477.615454] protocol 88fb is buggy, dev hsr_slave_0 [ 1477.620537] protocol 88fb is buggy, dev hsr_slave_1 [ 1478.230142] protocol 88fb is buggy, dev hsr_slave_0 [ 1478.235251] protocol 88fb is buggy, dev hsr_slave_1 [ 1478.790135] protocol 88fb is buggy, dev hsr_slave_0 [ 1478.795243] protocol 88fb is buggy, dev hsr_slave_1 [ 1479.030145] protocol 88fb is buggy, dev hsr_slave_0 [ 1479.030170] protocol 88fb is buggy, dev hsr_slave_1 11:34:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x2080) r2 = add_key$user(&(0x7f0000001540)='user\x00', &(0x7f0000001580)={'syz', 0x3}, &(0x7f00000015c0)="7454a7bc8a235bcee461f1251de2ef1da5a345ae5d8c793ff5ce84aa5e17f936048da2992b06e68e8f38f2da91ab6329b48a78ea1d4ab6de80d6e11d6d88f166846b144fb396fa1e190d039d2d6b3a17b1fda15e6f94a3c80ca2a49c4c00f8bcbda28a6213ee4cb59d3c24c0", 0x6c, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000001640)='keyring\x00', &(0x7f0000001680)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, r2, 0x0, 0x0, r3) ioctl$RTC_UIE_ON(r1, 0x7003) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x1) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$usb(0x0, 0x4100000000, 0x2) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f00000002c0)={0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}]}) unshare(0x40000000) clone(0x0, &(0x7f0000000440)="c8ccf18625e9490aeb20ee20f9ad8f99f8659b3e2da26e3de80d803cc8edabf00a10905ac6042471c82310d5e343c67b305d5bc142eef58dce542df1e2e0f263760843ae38d1cb88b8c1fb8e1e81df38351c390689a6b0f0d8a9a874134acc74583ec68e39a7b8ce831941a418a9d0ed52e77e445b94cecc2112b1018ea94bc6f85e69e1e475b3fa126088415f1d63ea80f6f3b020fffe3a29309dba70e6f40584a0a80d37add373e30490e3f054ee72dd79d2a449d4e0820a5779f8863d3597ec6d1adb1ddda3c6480c4ab290ae58cf2aebc1d3d2e490602c5404db6edc4dfb54f2d7d5864f69327a7dcfcbfe19a28c076f0c0a49aa2d2333b78afc47b44152d902a0001b9a6738519dbbe2503b631f7786a7a1a8f7c758c2223eb2bab2f5aa0abf9c2897b0ddfa5314ec4ad71b408848061a6c125ddce2da3ed459a7d9e727fce549f88024f3621f84a63e35b8316c273ca5d16aa2c81c5cd3847b315612529dd37d0e4955a0dd9ae6ea2e524f1710f2b4676001bfb4ee2c6daab89facbdf154cc2e31d067ce46c04bc999118e308c76ed7248c33b91c3124beadadd6ef32c4cda05289c769a3193873d6d2c60ebbd2a39876212f7ee1e3dbb30f447b94acb771b5b41e632e1f4353e5828f700960b0a4895c07cd802732c53abf35f43a0d5dd461bf8fcf5f5c28d8c4909eb6faf5237bd34c587a09215053a1857b0a282c4cd62de4eb95bf176f5db3a67a5d7b2df3be29c47c38c0afc63f10117cf3261c7d9dde6933a487bd8d302b9adac18c86d0f5b9d9e7e3ef23ae60e9e8ade09be7f1856b5e15e2dd54a592f6fc4ad2f1adb5d2b1df60a7b415d56e6f823156c6df93818c2cbbab3acb33c4af47d28c0f00ab83812aab1b89389ea1b22b31cfe402120830e2d6525317d113c428dfc6628ed4eaf8d7020c5f59d9bee3dab7904f2a694ba9bab198fc34a850dda085cbca7294886e08ece4c6673da3bfb51b8f9d443fcf0c8c00acac572387e60499d18a79cb3f65fb6d5b5ff0207e740e6d142c68e6973297a3530d214d3b5950b11c32d20cbd1f73bf8fb2f1ff32a46b9efe07433f3dfcb6c735b14761a961d09ab9e155f3e9f0627229addfcce6fd4c1a4db6f9f4d55bdb92466535209aea492c627028cb29ab0b878cba8a72dd7de278af9131d5fe73124eee8716db7b6d99da48096c5ee2560fe8c8c500801e32bb779ee82f4ddfd2b399172b492fb11c9485e798be480e0b96ac2820c6fd67afdaf301d6bfaca5460aa5a8eb3e79dd665facf5c8688283aef208b41070cbbe696ea66e48d25d397a80e9514271421412d7264ab7019e33a8b054ee1ac201e09880b5f6e0e44fdc6952ae46f290159c5694ea1cf09c7f76350c980beb9f2dfe23600f55b0afb69e128301ea4fbc04ed080517501ce3c7bdcbbedb5c7f3e45fbe90727a05ef7afbd0fa93b1932cc2a631987319da9e9f6c7a42de63627951324b8a65c3f66a8d7a99e0ec5a048f133b2697cbc13be67ae7e3163a9127da80a6b5a204d666fce0d3cd93adae6d8e353476e0c997394c4bda94acb8c581fe76a8d00e8a4026456427cd731a5a7e0246e33c4ad18e2bcebed77945eec69b6f1784fc29987bc04064c26673f4b33e5adf728f28a9c7f98b7b5568f3dfe94dc99af53b6043048ddc9edfdd1c4d4e618c603b2aab441a81bfeb50f18eb38ad6717efa196442ded1a4a932a60546b9fa95e86a1287b1cc4f78c67d107146e377f9131c7b78864ce1f1294a0691b5eeb13cca2e226f33661e4958aaf65248f5144196ae8b7cfa5568a863f61788d57d791278f23ac7ec2e222e3800dc5fc9e0180607fda282516cee1e9a8f353a4da929d4b1cf9294287e6a931d84da50b6a2590696fb7b0d680d87c950ed115d4c6a633cae363bc1b3c70487c8b1ca098ba9dd8c82607a30d0aa0c6c3f2ba6002014d9f7180cc6d9ba29558683042ef496b5387ad1b5b8fdefacfeca1b1494326a5519ee79c6288eefbf7d4df3ff731febbf5be588b651b7b2a2db16ea62868ce2c75abb8151cfd905c49a52cbc43fdca8da9f698e4367e124339c769ce97b2a1f253e696d90c462c3bb69b62489ec11c8c8c66a6c6367c2b7cf3849431bddbaccd5965e96ea827647e3d36a1a6439271df6f5bdf7b1c50dd617f4431cf05305e85c1d2863d8dbfde1a5c6818c9d821dd6b7299930817b46265a3d662cfe950644390a195fcc67f0242075b515fedffeba0c621bb49406928a838865fcffac0b6f5b9d1a54677ccd826adcc4452da9fe13145e489b6cc6ae3bb8b77e8398ab5ebb1fd6a033b3f9ed4aaa48abd9b96d8464828d2b2964972c9cb093e3011de51b4f9a444cb6f74c83be2a9378b1ff2acfc491309a942e682d6456bc5d20c19220cd594d911aff971a4febef27f17e0f3f5263c5d063515f59192b09ff7a98375a3726dce54dca8e387050015b4d152e6af0bb9556ed69b95cdd83fcce788bfde0c40723a5ddfb8b1189b05ab39fab0ebca3199e3154d14ac67ad4bf7249f88187757e8256f9225c092757d6e0930d7e0690bece9b237d3c1edbb24a70b432a3c8d6d14d120442092c1276d303e33c6fdce9bb321e36db44ee3d06129f001c8f95ec6c482d4ad7033af9a8cce110f351f500839d34c8e0e37623eb133fbb5db57f7b8c26d63bd633b2dc5de7f07f5ff8743fd325dd9dd6364a5a38c9e33a0ef4bb2e8e573ffbbcf9bfaa0644b167dc6e9bbda9a1da483204b59046f4e366c25c763a28cdded0d0f01cf568de840febca1ecaabe6cff2942f67c55b582e52977f2f532b5adedd292a19836fb28d03a98dce0f6fa1ae9a05c77ee46f1a1d6fe24899c00aa90e1c16f8a91c5ad1efcdecaae9a020ecab5c2eb33eb465c645162538f084fdd51f8223aa508a15278a3689d42a6115e8109a6004813cc4cd72c90f379e2bce283c2be7df00da45696ff9a0436c909d3bb9756c04c1fc4bbf171fc1f63cb1801ac808b9518cd110702c043943ac8be22a40df0fe4d951edebe9d163f939521dac000ca4ddc41cea6d9fdd3e7a8b37a5265658b61c5a0d19c413ef15653dad49ed85aa05c75a6bcfeedee11a0cafc790a90bd3024e8343336c40b114e7def75ac3f641c40087206c0b3a1110c16f8b9870694a967e2bd5ade7611dba49853ea04b1983eb827a120e0632e8c01ce4b2e15784437456c6ca1752b3aae8c4dc6953bc58a5e78986a977e8cc1c99b10c2af0a43e3d85435c00d8b8f1b0600c7743eeb206aaf3490229a38cb8c326648a5449ce3870e17dc47b9414a2226ee30b513efa36db299875d13e1f1b88f87a2859c12515a5e444bc84d614e2faf7810873b34319b5017d8e7156fe5fc22d7e9a554fb16f9a537fcc619082ba2485c1b82b0e3823623b190c3128cd7ef6506989f821b9d07d49c3b877665a21d28006515c84b72a9961e32ed0e01da84f5ff14ff9e0682460eff304607d6feefa70aff91c10bef4e3d73c472c10147c340309e861948f8cd6253a247333acc797c68f3dfcb16fab3f7e495b89bc9d67c1162f8958637ee9f0ba35ddb3dbf14140dd7b4a72092052403c3400cc0ec8ba8f198481850b2e048baa9d1acd9e5b4e8f7910eb35f8ce750f2da239c5df5cc7dd7a7fd72229bea49bda5a0e5e82d2de4f4355b7b6ae28ac629afb01332d21184baf3cf37bf3ec953ca3a77de4ec5b8ffdd1913a3203cf422b9e8e601755c6e2cea5e02229605f9f47683f31f4389b1584fb1e02982a6f339345a30ae1881bb844f9b023cd131fd38366bd55d0ff9b978e2eee9558215de4b85d499dfee0d654c115ed96ee983d2d979e22df7a90f83c69469ba3d013a870ddb27bc514d1aa73283e1d3bdb46509d04c8b18d3517f9e6e02d3d5b050e959b31b3e9560ee0d389051251c6e22308c7625cd856754ed08c7c2653ddd246e829eeb714a0aca1b9d25b4d8d42da1c15f4548fc07834384f7ace76f77cdc480170c88b32bd86d9d86c5f50e89b84a562190b8e5977e6ac417a822600bd786e43428f1e546c1c65b4bb9e6b2708980d326b21b861c61885e1cc010f8ca646384b927dc52a51f5cdb87828aedebc2bd7420dc86ffa8e39d0477643db1d2310db670a93916b69d480f05f3be985734c6663df1511091f9ff62a3e2628050161c849fafc1cdb8e93ef1a2390085747567e3603c9fc1acd7412c3d04b431e604a31b1f22e142d943578efbb6ae8e0f0f2818343c35d7edc55968ccff8eaf648491469b2d91dd4e2b60396f0364ab7357cbfde13e5f46c60bd6901a5090c63ae4a994ea129458ba83793f620eb6e764cbd3a6a4918e2bb751e1b90b4420a46a9529910f8cc91d6ec8848b5837dd75f58106cd5d89503b0a5f133a17033ee8de54df351a29754eae23483130290b1af5921f75733fcc4fb07470ea6f5981ab69a11b96073a855b92dd5e13f70e5859111b1753cd73d1adff8ef501c47f1399a13b4fa4c513a6aa8c06e969824f1c2b2404dcf7f03e4eea0caeca65f40a290a13c217513c67a10123c4dc10f75ee631b81f44e5e859ea49ac07aef7f17f522438a4b26c062a1575d32233af591762c6547c1aad1f95b6e4621cdd18d74b689eb781b61b5168867676065704fd0c9a90dc45c69e7ed199672a4e1519a241f24df0f56daa396702e926b4193bdc3bbf7a2514788c7e5404c2405392fcf60668611466065ab48fb94a7d047c88fb8f2604522efa33614c07d1e0c03822e95b1ba326566a607068c7e59be85c5bca78285b5700855bab4fe70ab5f3004109028e38e829f0a2046ea1165a8a901e00242265c91b626aeb50268cded66245b0de7dc016d5ab3e505626fd866d2c8bd7b98dad51eb9171458e093e18f6caf101a4bf2802bae90110f21395abd2fa061feacca983a4954e1347fdbd72ac22e8d10857a0961b940e0db4bc8f58f8d3367a8c6d3de6f618d3388d29ce696026ab1386d9350762228b4648bc7d81ba2be30c95d3bfc37df7e41ca279287075690af75f8ceaa6f8da663e309f5240694fc752b2d766c368d8ddd6c928afc067e04640806d957ed83f97af5fa6de15a7e28ea3948477704c8e3a96fa57a70fd66d39787a2e9a88f3659550f32945fd40f9a7264df68f0af2445b9edfaf9df1727876ac6b3e633000a56f7e4f98919e2f22725fbff9f2f4cbd0a543828a68783c439b6220c89d0af2ac61e7a46d95456361ca8d8e5463512d92f8b7a081215ca997339f06a25bf23110bb9abadca76161380b1a0cbfb4ba12205c30ed31d41a2cbd595fa186264aaf4aac7898a3809ac0b029f7296168cbad6f6171df62bc0e4e0aa7a58e161e79369aedf6ef27b5c552d9a8fa3fa20d39d46a22c99522b91c4c202fed35aff771eadf245bcdb39cfd4c865069dd8134f9fbdeb2c0187a3b69ff513146a4d7000b75d4ef07ec4f0bd1f417396da356c21199754f3d663408fae2b0c9ca0c333c092667df931d60cdad66eb6a46131b0ae05f81e466ea5a5394126aabe9289bf784789c7db291c8c6520aae54a26bd56387a88d13c37301e8e5212c2878b8210e58fb2685250cdd076ce4b53f2a98352abc05360dbdff765e557d865b1599317ab9bb8e13618f962d19b8f551bbc751f96c878ccbfb71c582aa71a2311da835a7eebac424bad1f39c6eaa4abd7d82175f31bd0a25fcaf1572670d16610874f9784e76dbcfb7a8dcf9192ad9e251232b77fa0aa7d07c001d40ac9043db4da96", &(0x7f0000000000), &(0x7f0000001440), &(0x7f0000001480)="c777ca7d3344d25cbbdb3d2cdf624591d6c21bab87bf8af3ab036d85e243424cb87e9d3b5b326d5cd5fadcbf6b9f11a74721c45e1331661d2b9c2fdb1f3cab5c015064caabcd3e9bd5ec08f5f606d466346eb41893e3250eee50001543bb7403c636a511780d7afcfcd0d3f915ae725bd7f7ca3dcddda2e3db94932be2e219a86f0e74573af5f14bca91c283c7cfe072cf3012d879f922fa1ccfa2a91fa0") getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000240)=0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000100)) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000300)={0x4, 0x0, [{}, {}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0}) 11:34:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:05 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x1, 0x80000000fc) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0) sendto$x25(r2, &(0x7f0000000040)="9d7608fa326040f073c8a86a510cdb5d06a73b8d91bd3711d36f2b6833fb097ee17ff2524bb583b82cc5cc1be417341f7aa0b87000484358e9485fd318b425b7c36eb9b4668b2d514936800131c2f6ce678d", 0x52, 0x5, &(0x7f00000000c0)={0x9, @null=' \x00'}, 0x12) 11:34:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="4031b018d737d4247e0b2fcf1aa1bdc51a0117a2d8eed8467c654418ea0edaed70282697245b3d07a75b3c71d2374492c2cd8779536b6736d48aa05121e9543aad7e8905c7685cbeb26cb5c93e81c11f50c0338bcf9c523f4cdf1c27b8d74371944ad317400308979e9f0f42c49b6cad338ffc47c6096f517a8ca803bf4fdca1dcdd86b44871405e520bce42163a69393a6b82d79079ae28337808d20c1ebc5a9b047a8cb041b6f9a023fe1e829b49"], 0x0, 0x0, 0x0}) 11:34:05 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000400)=0x5) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = semget$private(0x0, 0x0, 0x308) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000140)=""/148) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x38) 11:34:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x8, 0x80000000, 0xffffffffffffba2e, 0x1, 0x200}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x2, 0x913, 0x7f, 0x101, 0x5}, 0x14) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{}, {0x0}, {}, {}, {}, {}, {}, {}]}) lsetxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)={r3}) 11:34:05 executing program 3: ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000000100)={0xe6, &(0x7f0000000000)=""/230}) 11:34:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffff, 0x0, 0xffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8181, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r2, 0x2}, 0x8) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000140)={0x1, 0x0, {0x21, 0x8, 0xb, 0x18, 0x3, 0x400, 0x4, 0x7a, 0xffffffffffffffff}}) [ 1479.587416] binder: 19565:19568 unknown command 414200128 [ 1479.599007] binder: 19565:19568 ioctl c0306201 20000440 returned -22 11:34:05 executing program 2: r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x9, 0xa0202) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000100)={0x56, "aa000b6320a508deda96db0dc2ff2dd03f9e6d6b3d617a140d4c94edb80e74d43aa36956ea26bc96960caef05dc4a6438eead9bfe231a2374389e25fee99bca184dd9007e023070c6fd80ece999d3bee3ab60b8b05a8248da51d778248c12cd0c3e93fe07f24e5cf9970199ad27481989c6bc6ca63a68f33722226240badf5eb"}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:05 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = openat$usbmon(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon0\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r1}, {r0, 0x100}], 0x2, 0x0, 0x0, 0x0) 11:34:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r2 = fcntl$getown(r0, 0x9) r3 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x3, 0x4002) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x410000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r4, 0x700, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008010}, 0x800) r5 = open(&(0x7f0000000140)='./file0\x00', 0x80000, 0x7) ioctl$KDGETKEYCODE(r5, 0x4b4c, &(0x7f0000000180)={0x6, 0x4}) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x8, 0x100, 0x100000000, 0xfffffffffffffff9, 0x0, 0x1000, 0x0, 0x8, 0x7, 0xff, 0xe80e, 0x1ff, 0x9c, 0xe3, 0x20, 0x0, 0x43, 0x1, 0xfffffffffffffe01, 0x9, 0x7, 0x44, 0x7, 0xfffffffffffff0e0, 0x8000, 0x5, 0xfffffffffffffe00, 0x6, 0x5, 0x7f, 0x6d, 0x7, 0x0, 0x911, 0x8, 0x3, 0x0, 0x1, 0x1, @perf_config_ext={0x0, 0x5}, 0x2010, 0x5, 0x7ff, 0x5, 0x101, 0xfffffffffffffff9, 0x8}, r2, 0xf, r1, 0x0) [ 1479.683481] binder: 19562:19584 ioctl 7003 0 returned -22 [ 1479.697364] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1479.697364] 11:34:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7fffffff, 0x281) timerfd_gettime(r1, &(0x7f0000000040)) [ 1479.847752] binder: 19562:19584 ioctl 8004745a 20000100 returned -22 [ 1479.873720] binder: 19562:19584 unknown command 3 [ 1479.883336] binder: 19562:19584 ioctl c0306201 20000440 returned -22 [ 1480.413401] binder: 19562:19614 ioctl 8004745a 20000100 returned -22 [ 1480.740274] IPVS: ftp: loaded support on port[0] = 21 11:34:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="bd703917"], 0x0, 0x0, 0x0}) 11:34:06 executing program 4: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=@srh, 0x8) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000040)) 11:34:06 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x400, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="f062404006644a2d734a9ac6ceb515a3d1d904fd3469623c2e82587048510cb07df2778fd4eedf9c8459aef821cf8a14c7194e9f4cd0c63c98a2aae9cd8528039602f70f80d59b4992cda65492b83db5680aab1f5318a0ddf17682d9fef05c89b36c82488ce08152fd01b12e2edcc48d6f919be9b10b246a"], 0x0, 0x0, 0x0}) 11:34:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20000, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000040)={0x6, 0x7fffffff, 0x8}) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x1f, 0x6b3, 0x7, 0x9, 0x3, 0x0, 0xe11b, 0x34d, 0x40, 0xa0, 0x27b1, 0x80, 0x38, 0x1, 0x1, 0x8, 0x2}, [{0x70000000, 0x8, 0x100000001, 0x600000000000, 0x2, 0x4, 0x5, 0x4}, {0x60000006, 0x9, 0x8001, 0x3, 0x3, 0x7, 0x24d3211a, 0x1}], "c7fbddbfc4a033a9848e1029e8c5f444df83b8e80eb1c39eac9d41a62b72404e2787729ec9ca8cb9bcd638fe3698c16cb499deb7061be274c713af4c5769638eb92203e0548472b34031d0daaa676da5873269bf8eddd08f815cb1a55eca0a6ca2158a1795c413e823f280c87ca67b02017376f219e6fa8d3aea5da4b644cf482d500b87d03b4a62a1a706466159915f01221c9ef888194d427183eff8d88cdc704a0028c50cfefed4ab3edd98d68dd310cdfd26207cb8cd3cdae351cf60021910b8f932efe673791790be7daed7b553fef88fcf9d2451e054b5941b1cbfd6fc7ddb499b2c", [[], [], [], [], [], [], [], [], [], []]}, 0xb95) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) [ 1481.134533] binder: 19619:19626 unknown command 1077961456 [ 1481.137523] binder: 19620:19624 unknown command 389640381 [ 1481.153310] binder: 19619:19626 ioctl c0306201 20000440 returned -22 [ 1481.158761] binder: 19620:19624 ioctl c0306201 20000440 returned -22 [ 1481.185595] binder: 19619:19628 unknown command 1077961456 [ 1481.214201] binder: 19619:19628 ioctl c0306201 20000440 returned -22 11:34:08 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000400)=0x5) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = semget$private(0x0, 0x0, 0x308) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000140)=""/148) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x38) 11:34:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x0, 0x0, 0x0, 0x0, 0x0) fstat(r0, &(0x7f0000000280)) 11:34:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x4, 0x101000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000440)={{0x400, 0x7}, {0x6, 0x2}, 0x3, 0x1, 0xc00000000000000}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r3 = creat(&(0x7f00000000c0)='\x00', 0x48) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x37, 0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES16=r3, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=r2, @ANYRESHEX=r3, @ANYBLOB="c5e377caf4d0843b28e8f5b0a8429dfe7d233268c70a0f444ff2d35f88264811c5cd804250b016da8aadce64d773b6b0f64e54b59b375385fee9b43ff49d06af296f314569c3fb36cf09076cd540e1d67ae4a0a99e84b37fc9e49e842660d6a1d7cf80697b", @ANYRES64=r0, @ANYBLOB="697a072dcc942e09fe2343fe5617d58bb2a38702f485ac997ee134952148bd61980aba4516f06e7956330dfc8e4eb440afb9ad74ce61207306e86474dfb779c7a8a999dee27b759b4003ed72a92a844e8ec548d1cd3cdfdbed2febda15f428f1f8ba6c99bea983897e49cb2b7f5fb8ff95a0d8b2b1359a4d2806bbf0811aad5890b729934cf209b1121b6667cfe861d39070d1c8bddcd9d922525b839ad5173af264dbc4fc7c1aee595e02933914e373"], @ANYRESHEX=r0, @ANYRESOCT=r2], 0x3a9, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e40)=ANY=[@ANYBLOB="73656375726974790000000000000000001400000000000000000000000000000e00000004000000c0030000680200006802000000000056d94f5b0000000000280300002803000028030000280300002803309c50af3c889d885c31d4853dbb00538b062937c21bbb19ff3fd6452f58e730fb90265a021efc42b97252879e3eb391a8cbb6caf2811e2042b72a97f3b4f63bfbd3cd90fc6de80cc1fed8cebdbf800bf543e9813705638b0ac23ab65840401af70ad1afb0ca779cf0d3b4bf08f62f1e1dac03b120f397672fb690dc0000000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="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"], 0x420) 11:34:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) open_by_handle_at(r0, &(0x7f0000000040)={0xdf, 0x2, "82fea784b649054c0218cc3e51b4a2cdac3e0c6cce48cec21e8697696627adbb5a7c57e81cf0ef75da4b12fcaf6f22487206d4c7e3b64abfa16e046e36585e8f788962e93ec383b8ba1b0fa30751a3898420908b63382246a98963258787f88c33767694adf62d9629697692997c26743ca84e2f37ec422593ebc67a5c7f06e86c319ab33dc221ac6588a5d6e16d31da813ce4781d695020145de37c488cfa29348f547b1c84f7a9fc78d7a1c5ecfeda3d85f965a216ecd2a55433d0ffd5d1c229ef6c4fce2b23a42bf7002429b319ff642d5b88138e6d"}, 0x4000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x7fff, 0x80000000}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x48300000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="04062dbd7000fcdbdf250100000008000b00", @ANYRES32=r3, @ANYBLOB="14000700fe880000000000000000000000000101"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 11:34:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@'], 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x20, 0x40) accept$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000005c0)=0x14) fstat(r1, &(0x7f0000000600)) 11:34:08 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1482.636300] binder: 19637:19641 unknown command 4219648 [ 1482.649821] binder: 19637:19641 ioctl c0306201 20000440 returned -22 [ 1482.668947] binder: 19636:19640 unknown command -1 11:34:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20400, 0x1) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000100)) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x4000e5e9, 0x10000000000000) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000040)='./file0\x00', 0xe80b, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="820d5e6caa2a550d3a752693dd626096e6b17c708014d80152bb560e1c16e4f4a83b087f86450b56334e72ade8e92913f781a405e57e2a71ecc92a8a2e2ec50f6ea62285a240065203175613f77bc13e6f2959db42df9f16278dc035f41b6e180dca3f05e9e93665175d7bd4c87ae145c91d8c47a25778ab1bc14d869158d42b222053ac34637713e0a062034a88bf160d954eaa1f2379aae71159dc33b6ad7fcf8bca212c0bf04252d5408295f6fef69b", 0xb1, 0x22d6f22a}], 0x4, &(0x7f0000000180)='em1.securitykeyring\x00') [ 1482.688797] binder: 19637:19641 unknown command 4219648 [ 1482.695008] binder: 19636:19640 ioctl c0306201 200001c0 returned -22 [ 1482.721699] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1482.721699] 11:34:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="a1f84000"/16], 0x0, 0x0, 0x0}) [ 1482.733761] binder: 19637:19641 ioctl c0306201 20000440 returned -22 11:34:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x400000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xd8, 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRESDEC=r1, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES64=r1]], @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYPTR, @ANYRES64=r0, @ANYRESDEC=r2], @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r1, @ANYPTR64], @ANYRES64=r1, @ANYRES32=r0, @ANYRES64=r2, @ANYBLOB="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"], @ANYRES16=r2, @ANYBLOB="8e42b70521a34e3da48bcb53c061b9d6ce93355cc6ababde7cff100edff5a47e8f985bf981abdd717ff85fd062674e99dd95fbdbf7c2b592a14f2b029a60d93ad979e602841e3db5dc49c8219a12cc47fcc3f24e5c0ffa89dc84802aa654179d92ddf9666eb7efc0aaa51036752944067aba802a0b50ff3eada91049f781485649b9c65aa178adaab5206eaab544949d9376db13d238", @ANYRESHEX=r1], 0x0, 0x0, 0x0}) 11:34:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r1, 0x0, 0x1) [ 1482.879860] binder: 19667:19677 unknown command 4257953 [ 1482.909257] binder: 19667:19677 ioctl c0306201 20000440 returned -22 [ 1482.916622] binder: 19675:19682 unknown command 942800895 [ 1482.950109] net_ratelimit: 18 callbacks suppressed [ 1482.950115] protocol 88fb is buggy, dev hsr_slave_0 [ 1482.960217] protocol 88fb is buggy, dev hsr_slave_1 [ 1482.974772] binder: 19675:19682 ioctl c0306201 20000140 returned -22 [ 1483.001391] binder: 19675:19687 unknown command 942800895 [ 1483.007915] binder: 19675:19687 ioctl c0306201 20000140 returned -22 [ 1483.190171] protocol 88fb is buggy, dev hsr_slave_0 [ 1483.195413] protocol 88fb is buggy, dev hsr_slave_1 [ 1483.200166] protocol 88fb is buggy, dev hsr_slave_0 [ 1483.205589] protocol 88fb is buggy, dev hsr_slave_1 [ 1483.830132] protocol 88fb is buggy, dev hsr_slave_0 [ 1483.835433] protocol 88fb is buggy, dev hsr_slave_1 [ 1483.840682] protocol 88fb is buggy, dev hsr_slave_0 [ 1483.845872] protocol 88fb is buggy, dev hsr_slave_1 11:34:11 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000400)=0x5) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = semget$private(0x0, 0x0, 0x308) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000140)=""/148) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) 11:34:11 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x4b42, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0xfffffffffffffd9d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) accept4$ax25(r1, &(0x7f0000000040)={{0x3, @default}, [@bcast, @remote, @default, @null, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48, 0x800) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000001c0)={0xc000000, 0x10000, 0x20}) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x8280) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x5) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x6, 0x2, 0xfff, 'syz1\x00', 0x1}, 0x0, [0x6, 0x1, 0x114, 0x9, 0x7, 0x8, 0x18000000000, 0x9, 0x0, 0x1, 0x4, 0x1, 0x80000001, 0x6, 0x10000, 0x80000001, 0x3f, 0x7, 0xff, 0x1, 0x200, 0x9, 0x7c, 0x0, 0x80010, 0xffff, 0x3ff, 0xef, 0x7f, 0x8, 0x4, 0x8001, 0x9, 0xfbe0, 0xfffffffffffffff7, 0x5, 0x7e, 0x2, 0x2, 0x6, 0x400, 0x8, 0x5, 0x5, 0x8, 0x80000000, 0xffffffffffff683c, 0x1000, 0x77f0, 0x4, 0x4, 0x5, 0x7ff, 0x9, 0x9, 0x4, 0x0, 0x4, 0x8, 0x1000, 0x4, 0x2d05, 0x152, 0x6, 0x401, 0xa8a, 0x81, 0x8000, 0x8, 0xfffffffffffffff7, 0x80000000, 0xfffffffffffffffb, 0x7, 0x78, 0x569f11bd, 0x1, 0xffffffff, 0x6, 0x2fae, 0x2, 0x5, 0x5, 0x8, 0x2, 0x6, 0xe5f8, 0x4e28, 0x1, 0x9, 0x39de, 0x7fff, 0x3, 0x3, 0x7, 0x2e, 0x8001, 0x8, 0x10001, 0xba7b, 0xc8d, 0x1ff, 0x1a, 0x9, 0x702, 0xfffffffffffffff8, 0x0, 0x86, 0xfffffffffffffffc, 0x4, 0x9, 0x400, 0x3, 0xb5, 0xff, 0x3f, 0x7fff, 0x8, 0x1, 0x14, 0x664a70d6, 0x7, 0x5, 0x100, 0x3, 0x0, 0x2, 0x4, 0x8], {0x77359400}}) 11:34:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r1, 0x0, 0x1) 11:34:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x3, 0x42) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000100)={@bcast, @bcast, 0x2, 0x56}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:11 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [], 0xc5f5581, &(0x7f0000000000), 0x0}, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x20000, 0x0) keyctl$session_to_parent(0x12) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x8, 0x4, 0x9, 0x200, 0x1, 0x1, 0x3, 0x818d, 0x88c, 0xfff, 0x7}, 0xb) 11:34:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x1, 0x2394, 0x0, 0x1ff}) fsetxattr$security_evm(r1, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@ng={0x4, 0xc, '}'}, 0x3, 0x0) read(r0, &(0x7f0000000140)=""/68, 0x44) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffffffffffffd50, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = getuid() syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000080)="1acb32cb0c", 0x5, 0xb06}, {&(0x7f00000000c0)="7ab20703b9bcd3e21f055dbba6b6e0f2d9d9d33d89fb415bf5eb630c47ba99bbe2f24daec59b83a01b295a3e1e41ff9ae20e4fb71dde2037c82b6866fa447314ae7468223b3480b91c6647b7fa5433c16449259ed77a8f77c26455c75959fdda8828d31725865e98fdd998ca16bf8fb37180565454511db7c0f8de5b65a6c61356eb714eaa004e307d74834399539c56749b672fa8abfd561f03abd79ea8539bfc0f931e888854aacb472bf39f1807ac248c19f8d3899ebebd5295b8bdbe6688019f833415629a418181277ba83fa7153a588e4270107d256a9ce9739915b43c63e8fe5a34776e05f25f364783aea8", 0xef, 0x9}], 0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='quota=on,suiddir,quota=on,noloccookie,nosuiddir,rgrplvb,nosuiddir,nobarrier,barrier,hostdata=md5sumtrustedcpuset,smackfsfloor=/dev/dri/card#\x00,smackfstransmute=wlan0(posix_acl_accessvmnet0self,loem0,nodevcgroup(system,euid=', @ANYRESDEC=r1, @ANYBLOB="2c726f6f6f47b47b83"]) [ 1485.696847] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1485.732737] binder_alloc: allocated: 2448 (num: 284 largest: 96), free: 9840 (num: 1 largest: 9840) 11:34:11 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0xa, 0x8080000) accept$alg(0xffffffffffffffff, 0x0, 0x0) semget$private(0x0, 0x0, 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x1000000000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000500)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4~\x9aQ.\xa5\xa8\x19\x17\x8fW\x18+\xa7\xc7\xcc\x95{[\xf6\x11\xb3\xda\x89\xda\xf2T\xb1X\xfd\xa1DP\x92\xc7/\xd3\xa1n%\a\xa4\x1b\xaa\xe4\xda\xc4\xfe[\x18\xda\xc2\xf2\x06\x06U\x93\xa5U\x85\x8fZ\xb4g\xd6W\x02D3n\xd9\xac\x9es\xf7\xb8\x9a\xf3\x00]\x9d\x004\xbd4\xd1\xf1\xfb\xa8,\x7f\xc2\xa5\x1fI\xfa\xaf-{S\xad\x9e\xe6\x97\xf9\xda \x9a2\x89\xd3r-\x18w\xf3\xbf1Y\x89\xb7\xadf\xb2*5\xbd&\x8b\xae\x838\xfb\x04c\xe0Y\x12\x9a\x1e\xb5x\x86\x95\x9dI\x19\xcb\xe3E\x85S\xdf\x8c\x95\xd4=)\x9fkg\xa7q\xfb\x8f\xd6\x14X\x97\x817\xd0\x1b\x01*\x9a\x15\xfb?\xad\xc8\xca\x9b\r4\xc0\xc7\x988\xc6h\xf4\x00\xd6W\x91\xc3}V\x96\xb3\x1f;\xcb\xbb/\xc5N\x90\xd1\xac\xf8\xea\xe2gD\xe8f\xbb]W\xa7\xa1\x06`\xa5u\xb8\x80A\xa1hq\x04\x80VUTS]\x18\xc8x\x83\xc4\x95\x92k\x01+`\xe8C\x96I\xde\xc2n\xf1\x13\x84{]k\x04\xaeL;Gy\xf0\xa5\xa7\x8a\x14\xbb\xe3B]\xf5\xb5\xdb\xa0\x9f\xee\xc3\xd3\xf4`b\xdd\xe0\xd5\xa2\xa7\xb6\x11\\\xafL\xef\x13\'\x9b\xff/\xb9\xf3\xa7\xe3', 0x0, &(0x7f0000000000)) r0 = socket$inet(0x10, 0x3, 0xc) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000001c0), 0x4) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x20f, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r2, 0x80000, r1}) 11:34:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) dup(r1) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000140)=@short={0xb, @remote, @netrom, 0x1, @rose}, &(0x7f0000000180)=0x1c, 0x800) r3 = accept4(r2, 0x0, &(0x7f00000000c0)=0xfde5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1485.779218] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1485.779218] 11:34:11 executing program 3: ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) r0 = dup(0xffffffffffffffff) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000180)={0x7b, 0x0, [0x590, 0xfffffffffffffff8, 0x8, 0x7]}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x81}}, 0x2, 0x405c, 0x4, 0x2, 0x18}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r1, 0x3}, 0x8) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$sock_void(r2, 0x1, 0x1b, 0x0, 0x0) [ 1485.897427] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1485.909950] binder_alloc: allocated: 2448 (num: 284 largest: 96), free: 9840 (num: 1 largest: 9840) [ 1485.966555] audit: type=1400 audit(1564486451.796:126): avc: denied { setopt } for pid=19736 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 1485.992892] nla_parse: 20 callbacks suppressed [ 1485.992898] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1486.012703] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1487.990165] net_ratelimit: 19 callbacks suppressed [ 1487.990170] protocol 88fb is buggy, dev hsr_slave_0 [ 1488.000334] protocol 88fb is buggy, dev hsr_slave_1 [ 1488.005420] protocol 88fb is buggy, dev hsr_slave_0 [ 1488.010507] protocol 88fb is buggy, dev hsr_slave_1 11:34:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000100)={'yam0\x00', 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xffffffe, 0x4) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="074b02449cef111abc39276c39020a53fe", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x10) r2 = getpgrp(0x0) pwrite64(r1, &(0x7f0000000180)="9b0fa178d61e73376941d10b3629b54023e36b8a1d9b2f0ceb86591ba428b5d6bcd7575552005ea8659b3351689ea90c4c385e34c05e76eb73ecc0212ea5c258119967f67111fbe39f980f6a970b5beeea522e1207cebe357026718b53a7d2da80215eb4436139f84f53248214f681f7", 0x70, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) syz_open_procfs(r2, &(0x7f0000000100)='net/route\x00') 11:34:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x24340, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x7, 0x70, 0x100, 0x7, 0xf118, 0x3, 0x0, 0x8, 0x420, 0xf, 0x1, 0x8, 0x5, 0x0, 0x5, 0x7, 0x6, 0x9, 0xffffffff, 0x9, 0x81, 0x5, 0x9, 0x5, 0x2b9, 0x2, 0x0, 0x6, 0x3, 0x4, 0x5, 0x20, 0xffffffffffff8001, 0x659c, 0x2, 0x7, 0x7, 0x1f, 0x0, 0x1, 0x2, @perf_config_ext={0x5f04, 0xfff}, 0x44, 0x7, 0x377d, 0x7, 0x800, 0x5f33cabe, 0x101}, r2, 0x1, r1, 0x8) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:14 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000400)=0x5) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = semget$private(0x0, 0x0, 0x308) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000140)=""/148) gettid() wait4(0x0, 0x0, 0x80000000, 0x0) 11:34:14 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) [ 1488.630136] protocol 88fb is buggy, dev hsr_slave_0 [ 1488.635283] protocol 88fb is buggy, dev hsr_slave_1 11:34:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0) close(r3) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/187, 0xbb, 0xffffffffffffffff, 0x0, 0x283) write$binfmt_script(r2, &(0x7f0000000480)={'#! ', './file0', [{0x20, '[^:@procvboxnet0'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {}, {0x20, '[wlan0]&{'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}], 0xa, "c2e3d1b40179efb910f0ed9833c0d7a271ede8ec93af141aab39ee46d2379914dfb3e210167da0cc835d4c2785004860d7edfd4e53a8f14354583a6209fc2381d587ceeb587d44940790a95fbe6930c733e72a3e58dcba0e667e2a72750bf4bc8d8bc1fb2bd6f41cb5a8914e9856ee7655921b25cdb9ac0e8854fcdd6de33ce01d41e1abc20a420d6fa23285f97b9d3de8407230ca"}, 0x110) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0076c5caeb3859f3092015cc519c734040"], 0x0, 0x0, 0x0}) r4 = dup(r3) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$can_raw(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r5}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=@canfd={{0x2, 0x81, 0x20, 0x10000}, 0x2f, 0x0, 0x0, 0x0, "d91eca3fedf67d3efebae7300c7226e16719a6ddbf0171fd89d6ba10384719d9252848900e78c430715dcb0beb12f112d0060591c5466ea3563f6b2c5f646b78"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x44000) 11:34:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$void(r0, 0x5450) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0x520c0) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000080)) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x1, 0xfff}, 0xb) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000100)={0x10001, 0x7, 0x8000, 0x1, 0xf, 0x100000001, 0xfffffffffffffffb, 0x1, 0x0, 0x2, 0x96c3, 0x50}) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x1) [ 1488.733253] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1488.745067] binder_alloc: allocated: 2448 (num: 284 largest: 96), free: 9840 (num: 1 largest: 9840) [ 1488.761599] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:34:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x2, 0x2) ioctl$NBD_DISCONNECT(r1, 0xab08) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x7, 0x880) write$9p(r2, &(0x7f0000000100)="b7e4f1f89ba41009adf71b7aab1bd7fff67f6553963a61b7e1bb16097da1c68168c6415c0aac99ad838cee52a33ab8a1df08dee0134fcc13214f8d8219", 0x3d) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) sendto$rose(r2, &(0x7f0000000140)="b22ab4699d4e28238af9280552ef5c52f4937f902a28a3cbac4fa89a5a7ff6dd69d7f5be4019d2f2438be345434e86564e01031275c0aac2ae154ab4296d79d0bf48c47a2f103ef6512db372d4", 0x4d, 0x40000, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1488.797457] binder_alloc: allocated: 2448 (num: 284 largest: 96), free: 9840 (num: 1 largest: 9840) [ 1488.809049] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1488.809049] 11:34:14 executing program 4: semop(0x0, &(0x7f0000000140)=[{0x0, 0xfffffffffffefff8}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1) 11:34:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00024040"], 0x0, 0x0, 0x0}) [ 1488.838831] binder: 19763:19772 unknown command -893028864 [ 1488.862194] binder: 19763:19772 ioctl c0306201 20000440 returned -22 11:34:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x80000, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x80000000) sched_rr_get_interval(r1, &(0x7f0000000040)) futimesat(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {0x77359400}}) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) [ 1488.915109] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1488.927837] binder: 19763:19772 unknown command -893028864 [ 1488.943978] binder: 19763:19772 ioctl c0306201 20000440 returned -22 [ 1488.951789] binder_alloc: allocated: 2448 (num: 284 largest: 96), free: 9840 (num: 1 largest: 9840) 11:34:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf13, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:14 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x192, &(0x7f0000000000), 0x0}, 0x0) 11:34:14 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000400)=0x5) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = semget$private(0x0, 0x0, 0x308) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000140)=""/148) gettid() [ 1488.958535] binder: 19782:19787 unknown command 1077936640 [ 1488.982444] binder: 19782:19787 ioctl c0306201 20000440 returned -22 [ 1488.989186] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1488.989196] binder_alloc: allocated: 2448 (num: 284 largest: 96), free: 9840 (num: 1 largest: 9840) 11:34:14 executing program 3: accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000080)=0x80, 0x80000) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) 11:34:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000057137906000a3cc8f3d1ed40239fa209f19d25888d56f8554fc7bae4d43e4cdd960dcb333467d194c8dcbce4e6720000002070e0ef95eaa72a78f2df97c9d6149ee99213c1892bee282e14cf8569df731dbb6a1a7413425e5e98b43e2e7f0c70875d4492be3ed338ecc32e97ffe41445507ee185a07485bc7ca7881f80d9b92a9a000000000100000023205db5afe2636fa8d4af5978316a422539ab25875d9efca06c7653d2fb996f5e318f6d04879b660ef64437c6bb9e60a2f3dc6474ad8264d8c0e7c125b013a8d500c17127e551c122ec3e4aaf9b69d02c65ec6b2596a0e84bc0b0587e57948e7f81814e8936d84d7ab14a8ce20b4ab5bdc18a355253e15c2062db0933f1a1c8a9d3734c79fccb061d6cee816d5be92a708cd2f06f2fd363e042c9bc9dfa70443948e4a48af614ef1b3b31628d6111bdb40cff81d1b463348ff4d3bad30b27c4"], 0x0, 0x0, 0x0}) [ 1489.123690] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1489.123690] 11:34:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="37d907e4ea00634040"], 0x0, 0x0, 0x0}) [ 1489.188503] binder: 19814:19817 unknown command 0 [ 1489.194183] protocol 88fb is buggy, dev hsr_slave_0 [ 1489.194553] protocol 88fb is buggy, dev hsr_slave_1 11:34:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={r1, 0x80000, r0}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000140)={r3, &(0x7f0000000080)=""/186}) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r4 = dup(r2) ioctl$SNDRV_TIMER_IOCTL_STATUS(r4, 0x80605414, &(0x7f0000000200)=""/8) 11:34:15 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000400)=0x5) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = semget$private(0x0, 0x0, 0x308) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000140)=""/148) [ 1489.245733] binder: 19822:19823 unknown command -469247689 [ 1489.253136] binder: 19814:19817 ioctl c0306201 20000440 returned -22 [ 1489.262093] binder: 19822:19823 ioctl c0306201 20000440 returned -22 [ 1489.289359] binder: 19822:19824 unknown command -469247689 [ 1489.309189] binder: 19822:19824 ioctl c0306201 20000440 returned -22 [ 1489.325949] binder: 19814:19827 unknown command 0 11:34:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x100, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x2000}) [ 1489.339657] binder: 19814:19827 ioctl c0306201 20000440 returned -22 [ 1489.430116] protocol 88fb is buggy, dev hsr_slave_0 [ 1489.430142] protocol 88fb is buggy, dev hsr_slave_1 [ 1489.512591] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1489.533620] binder_alloc: allocated: 2464 (num: 286 largest: 96), free: 9824 (num: 1 largest: 9824) [ 1489.537105] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1489.537105] [ 1489.550610] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1489.565269] binder_alloc: allocated: 2464 (num: 286 largest: 96), free: 9824 (num: 1 largest: 9824) 11:34:15 executing program 4: pipe(&(0x7f00000015c0)) r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x14) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x110001) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x81, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x3, 0x6, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000300)}, 0x20000, 0x8001, 0x82b, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8}) fcntl$getownex(r0, 0x10, &(0x7f0000000200)) sendmsg$TIPC_NL_PEER_REMOVE(r2, 0x0, 0x0) syz_emit_ethernet(0x0, &(0x7f0000000400)=ANY=[], 0x0) 11:34:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffff810b}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000040)={r1, 0x8b}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xbc, r2, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe96}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1e21}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xdb}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="fe41e74a2217f4ec9758c2afcd0f12d3"}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x4008004) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) ioctl$TCSETXW(r3, 0x5435, &(0x7f0000000080)={0xdf84, 0x100, [0x8, 0x80000000, 0xfffffffffffffffb, 0x0, 0x2], 0x18ec8ed5}) 11:34:15 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000400)=0x5) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget$private(0x0, 0x0, 0x308) 11:34:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80, 0x0) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000480)={"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"}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000100)={{0x3, 0x5}, {0x4, 0x4}, 0xffffffff, 0x5, 0x6}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 11:34:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000bc6325e56e05f902f6898d96bf7f734de3a7d22c06813ff7f033414d17ffde0ac1cdc9590d930c1c60f57a7ae9f9b8d90cdbf6e5965f2d163ff4fcea0f9fe13bfb07e159304302d5cc8e44115e1f4eab4db291b3da498f05edce17246f10aa21bd36660ce2705730c087438accb9c98c3f62be6fb58bb1ed90d776c5fbd749"], 0x0, 0x0, 0x0}) [ 1489.778488] binder: 19854:19860 unknown command 0 [ 1489.778787] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1489.792539] binder: 19854:19860 ioctl c0306201 20000440 returned -22 [ 1489.803553] binder: 19856:19863 unknown command 0 [ 1489.813102] binder: 19854:19866 unknown command 0 [ 1489.814603] binder: 19856:19863 ioctl c0306201 20000440 returned -22 11:34:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x100000001, 0x400601) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x490880, 0x20) r2 = getpgrp(0xffffffffffffffff) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000380)={0x0, 0x0, {0x200, 0x5, 0x2002, 0xf, 0x3, 0x8, 0x1, 0x2}}) setgroups(0x1, &(0x7f0000000340)=[r3]) bind$rds(r1, &(0x7f0000000400)={0x2, 0x4e21, @remote}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000000c0)={{0xa, 0x1, 0x7fff, 0x800, 'syz0\x00', 0x200}, 0x0, 0x3, 0x4, r2, 0x5, 0x3, 'syz1\x00', &(0x7f0000000040)=['@:$\x00', 'loem0eth0keyringmd5sumsystembdevselinuxsecurity\x00', 'keyring!\x00', '\x00', 'vmnet0]\x00'], 0x46, [], [0x4, 0x4, 0x2, 0xfffffffffffffffb]}) 11:34:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r1 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000001c0)={0x0, @speck128}) mount$9p_virtio(&(0x7f00000000c0)='+selinuxGPL(trustedGPL\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x408, &(0x7f0000000480)={'trans=virtio,', {[{@posixacl='posixacl'}, {@access_client='access=client'}, {@cache_mmap='cache=mmap'}, {@fscache='fscache'}], [{@obj_user={'obj_user', 0x3d, 'cpuset\x1avmnet1^systemtrustedself*'}}, {@fowner_gt={'fowner>', r1}}, {@uid_lt={'uid<', r2}}, {@subj_user={'subj_user'}}, {@euid_lt={'euid<', r3}}, {@context={'context', 0x3d, 'system_u'}}]}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1489.828509] binder_alloc: allocated: 2464 (num: 286 largest: 96), free: 9824 (num: 1 largest: 9824) [ 1489.837637] binder: 19854:19866 ioctl c0306201 20000440 returned -22 [ 1489.850293] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1489.850293] 11:34:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x42200) write$evdev(r2, &(0x7f0000000140)=[{{}, 0x2, 0x4, 0x80000000}, {{0x0, 0x7530}, 0x128fd95b230b4d4f, 0x5, 0x8000}, {{0x0, 0x2710}, 0x3, 0x1}], 0x48) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="712d1c8d1768459c54c339a321cacbe7172c29bb339d503429c41e6cda69ac320f20c2136bdbd4eeb2baf9d1dc55c535a5a9f696d3a5e0a74ed81b1e19364486fe5f59c418983428b1461e611b0c65d9018253ba4879fd513830b37465148cc46579c7c4c820583df8c27e66f570396b2cb6ad57032649d8c18c25f0032ab24863737068b0d4ed2237dda970fb211ec5b183438072a238d69b1384739ad916db3e9eb2cdce2c0d71956b1389860a7d5e4f345c72a2e4287dac3ad07f00ab192cf5afaffbceee7b3c01992b6404e0389fe53061f5e1f2a55a85cbc7f36cd721723ba395d6395799b54c5bc0f49ce683e5"], 0x0, 0x0, 0x0}) preadv(r0, &(0x7f0000000300), 0x4, 0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000840)=0xe8) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000940)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000a40)=0xe8) fstat(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000cc0)=0xe8) r11 = geteuid() getgroups(0x4, &(0x7f0000000d00)=[0xee00, 0xee00, 0xee01, 0x0]) lstat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getgid() prctl$PR_CAPBSET_READ(0x17, 0x1d) r15 = getegid() r16 = getgid() lstat(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='system.posix_acl_access\x00', &(0x7f0000000ec0)={{}, {0x1, 0x7}, [{0x2, 0x7, r3}, {0x2, 0x6, r4}, {0x2, 0x5, r5}, {0x2, 0x2, r6}, {0x2, 0x1, r7}, {0x2, 0x0, r8}, {0x2, 0x1, r9}, {0x2, 0x4, r10}, {0x2, 0x2, r11}], {0x4, 0x3}, [{0x8, 0x0, r12}, {0x8, 0x7, r13}, {0x8, 0x2, r14}, {0x8, 0x2, r15}, {0x8, 0x4, r16}, {0x8, 0x1, r17}], {0x10, 0x3}, {0x20, 0x1}}, 0x9c, 0x1) 11:34:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='8c@@'], 0x0, 0x0, 0x0}) [ 1489.964640] binder: 19877:19882 ioctl 40106614 200001c0 returned -22 [ 1489.984850] binder: 19881:19883 unknown command -1927533199 [ 1489.994519] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:34:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x10, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 11:34:15 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000400)=0x5) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1490.018513] binder: 19881:19883 ioctl c0306201 20000440 returned -22 [ 1490.034996] binder_alloc: allocated: 2464 (num: 286 largest: 96), free: 9824 (num: 1 largest: 9824) [ 1490.090997] binder: 19881:19888 unknown command -1927533199 [ 1490.098981] binder: 19886:19893 unknown command 1077961528 [ 1490.099638] binder: 19881:19888 ioctl c0306201 20000440 returned -22 [ 1490.121805] binder: 19877:19895 ioctl 40106614 200001c0 returned -22 [ 1490.135825] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1490.154596] binder_alloc: allocated: 2464 (num: 286 largest: 96), free: 9824 (num: 1 largest: 9824) [ 1490.156051] binder: 19886:19893 ioctl c0306201 20000440 returned -22 [ 1490.169481] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1490.169481] 11:34:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x10000, 0x0) write$UHID_CREATE(r1, &(0x7f0000000280)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000100)=""/70, 0x46, 0x3, 0x0, 0x5, 0x81, 0x3}, 0x120) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0xffffffffffffffff) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 11:34:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000100)={0x4, 0x2, 0x1000, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="f66e861aac9300634040"], 0x0, 0x0, 0x0}) 11:34:16 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000400)=0x5) 11:34:16 executing program 4: pipe(&(0x7f00000015c0)) r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x14) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x110001) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x81, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x3, 0x6, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000300)}, 0x20000, 0x8001, 0x82b, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8}) fcntl$getownex(r0, 0x10, &(0x7f0000000200)) sendmsg$TIPC_NL_PEER_REMOVE(r2, 0x0, 0x0) syz_emit_ethernet(0x0, &(0x7f0000000400)=ANY=[], 0x0) 11:34:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000280)=@nl, &(0x7f00000001c0)=0x80) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x1b, 0x5, 0x4b8, 0x0, 0x0, 0xd0, 0xd0, 0xd0, 0x420, 0x420, 0x420, 0x420, 0x420, 0x5, &(0x7f0000000300), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x14}, @remote, 0xffffffff, 0x0, 'lapb0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x7f, 0x2, 0x70}, 0x0, 0x98, 0xd0}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xb, @multicast2, @dev={0xac, 0x14, 0x14, 0x11}, @port=0x4e21, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x512, 0x6d, 0x1, 0x1}}, @common=@unspec=@realm={0x30, 'realm\x00', 0x0, {0x0, 0x5, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2, @rand_addr=0x5e, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x3, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@dev={[], 0xc}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x4, @loopback, @empty, @port=0x4e22, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x3f, 0x8}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x19, @multicast1, @remote, @gre_key=0xfff, @icmp_id=0x64}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x210000, 0x0) connect(r2, &(0x7f0000000100)=@caif=@dbg={0x25, 0xffffffff, 0x9}, 0x80) openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x800, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x143, &(0x7f0000000000), 0x0}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000a00)={&(0x7f0000000380), 0xc, &(0x7f00000009c0)={&(0x7f0000000400)={0x30, r3, 0x2, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x6a8, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000a40)) accept4$inet(r2, 0x0, &(0x7f0000000ac0), 0x80800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:16 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="e5374505"], 0x0, 0x0, 0x0}) r0 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={r2, 0x80000}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @rand_addr=0x9}}}, 0x84) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={r1, r3, 0x4}) 11:34:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={r1, 0x80000, r0}) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) [ 1490.899463] binder: 19914:19919 ioctl 801c581f 20000100 returned -22 [ 1490.932059] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1490.953070] binder: 19914:19932 unknown command 445017846 [ 1490.964348] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1490.964348] 11:34:16 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x40) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r3 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x3, 0x40) fanotify_init(0x10, 0x1403) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x10) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x12) [ 1490.995881] binder: 19914:19932 ioctl c0306201 20000440 returned -22 [ 1490.995982] binder_alloc: allocated: 2480 (num: 288 largest: 96), free: 9808 (num: 1 largest: 9808) 11:34:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) chmod(&(0x7f0000000000)='./file0\x00', 0x100) [ 1491.059976] binder: 19914:19919 ioctl 801c581f 20000100 returned -22 [ 1491.069113] binder: 19914:19932 unknown command 445017846 [ 1491.090346] binder: 19914:19932 ioctl c0306201 20000440 returned -22 11:34:16 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1491.104840] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:34:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x6, 0x0) recvfrom$inet(r0, &(0x7f0000000000)=""/30, 0x1e, 0x10160, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xfffffffffffffe76) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x183000, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000002c0)={'veth0_to_hsr\x00', {0x2, 0x4e24, @rand_addr=0xffff}}) getsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000200)=0x4) syz_emit_ethernet(0x97, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200002d000000890314000000013831b9eec78a0200ffffff00042bacfc00a7b0364e4ea0b74727146c8579650121dcdee6032e263b6e48b75272724890028d92027efbeaeddd6bd1ec49cefa8ea663005f623575cf1f4434939fb5b301892564870cddf3e690a1db714280607711440e2c3091b47b5ff740a31c9a0bec026b266f2100e02134e731b320887ee0bad47cc92723e25bf6f2cb634594dacd033bff87f28b9a2945b372e76dfea8676de5542e4e65b16b13c2b710aa72e363d961f62641424c9d81bd2600"/216], 0x0) [ 1491.167778] binder_alloc: allocated: 2480 (num: 288 largest: 96), free: 9808 (num: 1 largest: 9808) 11:34:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vga_arbiter\x00', 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000000000000a004e220000000500000000000000000000ffffe00000019c0500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a004e2200000004ff0100000000000000000000000000012a0b000000000000000000000000000000000000000000000000000000000000000000000000000000008000"/272], 0x110) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x3be, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="090002007a0900009fd94711a261214e544a411937b1994f161f910b980000d6433e2d8d793b0e2481919d96c716adc91d7618ac578b8353f3bde5373a8a6609f62e4398bd7094c96051f1fa6fca0448795ac13e5cbcd44f7bf3a65ba22370de69daadc0c990f5bd07"], &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x1, 0x8, 0x4, 0x8, 0x14}, &(0x7f00000003c0)=0x98) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000480)={r2, 0x2f, 0x400, 0x280000000000000, 0x10001, 0xc577, 0x0, 0x0, {r3, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x8000, 0xc8, 0x612d, 0x7, 0x6}}, &(0x7f0000000400)=0xb0) 11:34:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xb2, 0x8880) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2f, 'cpu'}, {0x2b, 'cpu'}, {0x0, 'pids'}, {0x2b, 'cpu'}, {0x2f, 'io'}, {0x2d, 'pids'}, {0x2b, 'memory'}]}, 0x27) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1491.217729] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1491.217729] [ 1491.301223] QAT: Invalid ioctl 11:34:17 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) 11:34:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x10000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1491.346554] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1491.371588] binder_alloc: allocated: 2488 (num: 289 largest: 96), free: 9800 (num: 1 largest: 9800) [ 1491.381346] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1491.414978] binder_alloc: allocated: 2488 (num: 289 largest: 96), free: 9800 (num: 1 largest: 9800) [ 1491.448926] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1491.483634] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1491.483634] [ 1491.514820] binder_alloc: allocated: 2488 (num: 289 largest: 96), free: 9800 (num: 1 largest: 9800) 11:34:18 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000080)={'batadv0\x00', 0xbd7b}) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r1, r2, 0x0, 0x1) sendfile(r1, r0, &(0x7f0000000040)=0xfffffffffffffffc, 0x0) 11:34:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x200, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) getsockopt$inet_dccp_buf(r1, 0x21, 0xc, &(0x7f0000000080)=""/75, &(0x7f0000000100)=0x4b) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 11:34:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r2, r1, 0x0, 0x5, &(0x7f00000003c0)='GPL\x9a\x00'}, 0x30) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x140, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f00000002c0)=""/229) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000280), 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000200)={r5, 0x100000001, 0x9, 0x6}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x34, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00635b40653251e26c0b6005e5f70d28b677fbe45ce1d7388d42ec55d533d245000000000000000093ed2190705e07a0c69c60e7"], 0xff45, 0x0, 0x0}) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000440)) 11:34:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x10000036, &(0x7f0000000000), 0x0}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x200, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000140)=0x5000) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xc2, 0x8040) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000280)={0x7f, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e22, @loopback}}}, 0x108) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x4000, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000100)) 11:34:18 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) [ 1492.226879] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1492.249232] binder_alloc: allocated: 2488 (num: 289 largest: 96), free: 9800 (num: 1 largest: 9800) [ 1492.264819] binder: 19988:19993 unknown command 1079730944 11:34:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) [ 1492.268422] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1492.272161] binder: 19988:19993 ioctl c0306201 200004c0 returned -22 [ 1492.299749] binder_alloc: allocated: 2488 (num: 289 largest: 96), free: 9800 (num: 1 largest: 9800) [ 1492.309502] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1492.309502] 11:34:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00631540"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000280)={{0x3, 0x0, 0x100000001, 0x1, '\x00', 0xfffffffffffffffc}, 0x4, 0x220, 0x9, r2, 0x8, 0x8001, 'syz0\x00', &(0x7f0000000140)=['\x00', '/dev/binder#\x00', 'broute\x00', 'keyring#\x00', '/dev/binder#\x00', '/dev/binder#\x00', '/dev/binder#\x00', '\x00'], 0x46, [], [0x80, 0x1000, 0xca, 0xbd8]}) 11:34:18 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) 11:34:18 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000080)={'batadv0\x00', 0xbd7b}) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r1, r2, 0x0, 0x1) sendfile(r1, r0, &(0x7f0000000040)=0xfffffffffffffffc, 0x0) 11:34:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 1492.345782] binder: 19988:20008 unknown command 1079730944 [ 1492.360377] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1492.371203] binder: 19988:20008 ioctl c0306201 200004c0 returned -22 [ 1492.378759] binder_alloc: allocated: 2488 (num: 289 largest: 96), free: 9800 (num: 1 largest: 9800) 11:34:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) r2 = perf_event_open(&(0x7f0000000280)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x4, 0x0, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb290, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8100, 0x7f, 0x0, 0x4}, r1, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000000c0)) 11:34:18 executing program 3: remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xffffff, 0x1ffffffffffffd, 0x24802) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getresgid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000500)=0xe8) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x7fffffff, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000080)="f8b098fb0c4d53ca563ed4b569d38229e7812d21b3208f7fad570a994b834976e6014bfd9fea1bf8fba441dadf4509bb38372ac84257fd37f79fd9e712e87325f74f7815ff6c49be174e3cd600e7712d4002952a8345e5ef76b82625d365bc9e38393d5ffa92c26d6d90011bed61f19b4878189f3d4ee7c1b3947d1505f3d1", 0x7f, 0x401}, {&(0x7f0000000100)="59ff8cc0ed8a45651e06ff99f91b06de7da45a9ac327d6d93020c201a9a46ae87bcec33badbb1ac06e2b679f72c8034df57e201bc8ca2ace5f9235fb8faa640001005a6263", 0x45, 0x2}, {&(0x7f0000000180)="d80b4fa313d6c2d473080ab4c2d40f3e35d3", 0x12, 0x4}, {&(0x7f0000000280)="da8259bd57ef174ae5cab9e53bef0327c40da4fe6e3e73ab5243b5843724a7fbccbdeeaa9f01711f6a15eecfb86a094d37e7e3a8c568c2104866049e0202da99cea86bd0c986284c520526f79d638972c34f8f5c06f2b4e8d55bee17124ac17c9f3a1e2cbbffa165dd1ff5746c69be591d817c1a426dbb9aa445c511aba058d8f4ed3b7ef20eb92922b5a4c86482cd7e32f6cb0688b4172630d982ebf848f0fd72f27addd7537adb290babb06dc243d098fd28c8f867f6c03a5e537bfe6181", 0xbf, 0x2}], 0x12020, &(0x7f0000000540)={[{@gid={'gid', 0x3d, r1}}], [{@fowner_eq={'fowner', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#wlan0selinux\xbd'}}, {@obj_user={'obj_user', 0x3d, '{]]proc'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/dri/card#\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/dri/card#\x00'}}]}) sigaltstack(&(0x7f0000ffa000/0x4000)=nil, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 11:34:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x20000, 0x0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000240)) [ 1492.483387] binder: 20018:20024 unknown command 1075143424 [ 1492.508458] binder: 20018:20024 ioctl c0306201 20000440 returned -22 [ 1492.548622] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1492.574918] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1492.574918] [ 1492.589296] binder: 20018:20033 unknown command 1075143424 11:34:18 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) semget$private(0x0, 0x0, 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x1000000000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000500)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4~\x9aQ.\xa5\xa8\x19\x17\x8fW\x18+\xa7\xc7\xcc\x95{[\xf6\x11\xb3\xda\x89\xda\xf2T\xb1X\xfd\xa1DP\x92\xc7/\xd3\xa1n%\a\xa4\x1b\xaa\xe4\xda\xc4\xfe[\x18\xda\xc2\xf2\x06\x06U\x93\xa5U\x85\x8fZ\xb4g\xd6W\x02D3n\xd9\xac\x9es\xf7\xb8\x9a\xf3\x00]\x9d\x004\xbd4\xd1\xf1\xfb\xa8,\x7f\xc2\xa5\x1fI\xfa\xaf-{S\xad\x9e\xe6\x97\xf9\xda \x9a2\x89\xd3r-\x18w\xf3\xbf1Y\x89\xb7\xadf\xb2*5\xbd&\x8b\xae\x838\xfb\x04c\xe0Y\x12\x9a\x1e\xb5x\x86\x95\x9dI\x19\xcb\xe3E\x85S\xdf\x8c\x95\xd4=)\x9fkg\xa7q\xfb\x8f\xd6\x14X\x97\x817\xd0\x1b\x01*\x9a\x15\xfb?\xad\xc8\xca\x9b\r4\xc0\xc7\x988\xc6h\xf4\x00\xd6W\x91\xc3}V\x96\xb3\x1f;\xcb\xbb/\xc5N\x90\xd1\xac\xf8\xea\xe2gD\xe8f\xbb]W\xa7\xa1\x06`\xa5u\xb8\x80A\xa1hq\x04\x80VUTS]\x18\xc8x\x83\xc4\x95\x92k\x01+`\xe8C\x96I\xde\xc2n\xf1\x13\x84{]k\x04\xaeL;Gy\xf0\xa5\xa7\x8a\x14\xbb\xe3B]\xf5\xb5\xdb\xa0\x9f\xee\xc3\xd3\xf4`b\xdd\xe0\xd5\xa2\xa7\xb6\x11\\\xafL\xef\x13\'\x9b\xff/\xb9\xf3\xa7\xe3', 0x0, &(0x7f0000000000)) r0 = socket$inet(0x10, 0x3, 0xc) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000001c0), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x1}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r2, 0x80000, r1}) [ 1492.599283] binder: 20018:20033 ioctl c0306201 20000440 returned -22 [ 1492.615440] binder_alloc: allocated: 2504 (num: 291 largest: 96), free: 9784 (num: 1 largest: 9784) 11:34:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xf3, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x400) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000000c0)={0xbf0000, 0x9, 0x8, [], &(0x7f0000000080)={0xb80903, 0x5, [], @p_u8=&(0x7f0000000040)=0xe3}}) 11:34:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0xffffffffffffffff) chroot(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000180)='./file0\x00', 0x121000, 0xa4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xede, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000140)='syz0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="b9c3e494"], 0x0, 0x0, 0x0}) 11:34:18 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 11:34:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00#@@'], 0x0, 0x0, 0x0}) [ 1492.709280] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:34:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0xa, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000040)) 11:34:18 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) semget$private(0x0, 0x0, 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x1000000000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000500)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4~\x9aQ.\xa5\xa8\x19\x17\x8fW\x18+\xa7\xc7\xcc\x95{[\xf6\x11\xb3\xda\x89\xda\xf2T\xb1X\xfd\xa1DP\x92\xc7/\xd3\xa1n%\a\xa4\x1b\xaa\xe4\xda\xc4\xfe[\x18\xda\xc2\xf2\x06\x06U\x93\xa5U\x85\x8fZ\xb4g\xd6W\x02D3n\xd9\xac\x9es\xf7\xb8\x9a\xf3\x00]\x9d\x004\xbd4\xd1\xf1\xfb\xa8,\x7f\xc2\xa5\x1fI\xfa\xaf-{S\xad\x9e\xe6\x97\xf9\xda \x9a2\x89\xd3r-\x18w\xf3\xbf1Y\x89\xb7\xadf\xb2*5\xbd&\x8b\xae\x838\xfb\x04c\xe0Y\x12\x9a\x1e\xb5x\x86\x95\x9dI\x19\xcb\xe3E\x85S\xdf\x8c\x95\xd4=)\x9fkg\xa7q\xfb\x8f\xd6\x14X\x97\x817\xd0\x1b\x01*\x9a\x15\xfb?\xad\xc8\xca\x9b\r4\xc0\xc7\x988\xc6h\xf4\x00\xd6W\x91\xc3}V\x96\xb3\x1f;\xcb\xbb/\xc5N\x90\xd1\xac\xf8\xea\xe2gD\xe8f\xbb]W\xa7\xa1\x06`\xa5u\xb8\x80A\xa1hq\x04\x80VUTS]\x18\xc8x\x83\xc4\x95\x92k\x01+`\xe8C\x96I\xde\xc2n\xf1\x13\x84{]k\x04\xaeL;Gy\xf0\xa5\xa7\x8a\x14\xbb\xe3B]\xf5\xb5\xdb\xa0\x9f\xee\xc3\xd3\xf4`b\xdd\xe0\xd5\xa2\xa7\xb6\x11\\\xafL\xef\x13\'\x9b\xff/\xb9\xf3\xa7\xe3', 0x0, &(0x7f0000000000)) r0 = socket$inet(0x10, 0x3, 0xc) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000001c0), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x1}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r2, 0x80000, r1}) 11:34:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x200000) write$P9_RLCREATE(r1, &(0x7f0000000180)={0x18, 0xf, 0x2, {{0x8, 0x0, 0x6}, 0x20}}, 0x18) getsockopt$inet6_tcp_buf(r1, 0x6, 0xf, &(0x7f00000003c0)=""/74, &(0x7f0000000480)=0x4a) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x8000, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000048}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x802, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x6}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f00000001c0)={0xffff, 0x9}) [ 1492.751670] binder_alloc: allocated: 2504 (num: 291 largest: 96), free: 9784 (num: 1 largest: 9784) [ 1492.782105] binder: 20056:20062 unknown command 1077945088 [ 1492.788937] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1492.788937] 11:34:18 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 11:34:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1492.841926] binder: 20056:20062 ioctl c0306201 20000440 returned -22 11:34:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000100)) 11:34:18 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000040)={0x3ff, 0x14}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000006c0)={0x0, 0x9, 0x30, 0x9, 0x1}, &(0x7f0000000700)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000007c0)={0x0, 0x3f, 0xc310e7b}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000004140)={0x0, @in6={{0xa, 0x4e24, 0x6, @empty, 0x4}}, 0x5, 0x78, 0x7, 0x0, 0xee7c}, &(0x7f0000004200)=0x98) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000005900)={0x0, 0xe6, "c47bfce74709b078b5d027b6eee90e22246fb437fcdaa7e827de011f5798064139f4df61d8274dc6fde11a317b4cc084ce0f0033f6b3c7cc16754fbadde039d944fca03c5da6dd04d5796791274016fae8113769d34dd72bdc986ea8a3f2a6539b7857bbfeb99000c6e02690040d835817a34955dae0eeaf6238e7d2dc18fdd1ad5cea40261fc3091f84e6f580a84204478621b834051eeee2f8ac5d0ac7b50162920f5a6c2e0d98abd7ea6f7b84065416be5c4109132055b662a5f97c10d52f7bfd570c1a701ebeadb3d5c70ea464f09c75ced7ba02b78e096bb038699d1cf36d119a6c065b"}, &(0x7f0000005a00)=0xee) sendmmsg$inet_sctp(r0, &(0x7f0000005b00)=[{&(0x7f0000000080)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000600)=[{&(0x7f00000000c0)="99c3bcef3c1ed2ae319c02cd6b756984f9614ebc40d6485fa70ba09169c0d71c9a0bbb55413eaf250834978e3e4c026ef2852bdb87c639cf9dc5adf648530a155ae1dd5b7b41bf0ff32351ad92e3c83623cbb85ad7baba6312c2d4468f27410bdbfec9d2cf35d67604a6782e9e", 0x6d}, {&(0x7f0000000140)="79bff02f66097469422e", 0xa}, {&(0x7f0000000180)="f6deb9838e3b9cc2f23d00aa6b124eac94b12562174a35f5e538cccb137fe4", 0x1f}, {&(0x7f00000001c0)="fa128fc4a5c9f85230061a5b8f62ab9de0acbfe0809819bd8f806a3c7fabf9fc29d36112a331b77a8bafda3be8fbcb4b7d1afb98cda3e49ca624021a9e5c7e23a16230cac549bba9ea91a45f9f795e53cdbcdfa796904c114c9d068a", 0x5c}, {&(0x7f0000000280)="9176ab83e32d9563cae3b7a9910af2dba10a6a1077922638b63fa0b0ad12f7e759df08817b6fa321d4b2385f9a61d89e31519bbd62736d65eae0349731234b49104c79f7c08011831de4ad631bd55cfad20c631eb65dba626f0d1c426fab4d4bb25b254ed692138cfdc502a3d132bafd043e60eb23f5a9e9ee67fabb22efbc033940738036773262681728f3eeaf405ace66d9871a6411ec1ca76c1b0ef2ef1eaad8de4db0914507b4451cd97eff2aaba36c19455e895bd5e70bd97c4ea4b1353d782715bd27e4b9f4e7b3748757c497d51e93a69edc94df", 0xd8}, {&(0x7f0000000380)="602446275dded36b49ffc91e9a53c00ef624de7eb756953a4cf920b29ca2ced2b49d4ce33c899593fa0b04b97b88b67771122cafc9bfb8095ca6e17dfe5d00563b218fd63d00d19cafff43079c83366e45c43b3827570eccf677bc3d65a8cd616b16b6e40d5de82f38e5b8c47fa49defc2c9884acb7cab6fb51dbdd7f024de7906f7343970686bcf200df27c8c10a0aa1e0fda21b7cfabbd740a17685ceca5d1a2353af2921a", 0xa6}, {&(0x7f0000000440)="416433580ef79b9149603cbe712cc69e5cbd3e6c3206dcd6ea37024b", 0x1c}, {&(0x7f0000000480)="b7e295a5d0fb0fcbbdc9a0d6b855cea397a7884bff6bc707f1200e276bb77f6ae2182ebf314bebb251aaecf7213fb73817442431582237167669a64da25158adce4360cfd1df062a", 0x48}, {&(0x7f0000000500)="dad98240eab67ef4af57671ed48eda9164dbb26924fff1c31804cca9e92e4400f8801c3554737aa31e770a0921b3f1be26abf2921a1cffd898f88a0cdb92241c5b21bb1bcd347da327a342a83888e420ba5cc8b93e96bcc178e6503971c00b8f1437da1ac8d7cf7605d6cb42a47a4d5d61db41272e53e2b221a2d4dc870a10e910db7bd27c47b2342b32cbb151573107c27a96d82c39e3ad393d0e24046c040dd824e4b55cac8faeca1e39438ecdb495aa4c0beb23871e6d415b51e069f7ac4731d458d346fe159cf814de17523a6916ec", 0xd1}], 0x9, &(0x7f0000000840)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0xc, 0x9, 0x2, r1}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @authinfo={0x18, 0x84, 0x6, {0x3f}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x2, 0x9, 0x0, 0x8, 0x7, 0x9, 0xfb2c}}, @sndrcv={0x30, 0x84, 0x1, {0x800, 0xb4c, 0xc, 0x1ff, 0x58, 0x0, 0x0, 0x4, r2}}, @authinfo={0x18}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @dstaddrv4={0x18, 0x84, 0x7, @empty}], 0x100, 0x40080}, {&(0x7f0000000940)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000001b40)=[{&(0x7f0000000980)="28055855ff6026f77aa04145f65d6639cae6612ce5b79a4028f354f1912808b5893661158acdbb33d1ef2691921700ef970f9f13166d26cbf433acf20b1a26a634d6f1357d25625d2950942ccee3b99f4c21153b28f5714552e2c25dd92548fb4409ead98257445354f9352393c3662ba4751861b470f487b2aec7b1487ee4ebc1f7d024ca1775ed315c8f36ccb67f4a7635e64f5958a65477557d19c86597fae2ea1bd1b425fd79dfdde3c1acf3a59938df79eecb3e8b791602f8fc", 0xbc}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="b8dbb3612c646a7c44110135fc40c7825cb5f8257e7c05419c23a041a27bd6fe7991864a37964d5c61f973802d7c138d6bb045d099a543", 0x37}, {&(0x7f0000001a80)="04d389b236ef9b28d9778b3b45e85630b1fcd711a8e34a4fbe7ec4fe5c6012e1da2fb7ccee4944d1aa7c819bc370b25aabe7e7fc7b77c8e1abd2c3796b17f0908d666a8cc6d68f41c9afb7dd205a3e2681b8eb767ffa484f7a86e35b7b60037ee602405bda7459ca72941e0b89549a74102406d63f6a896bdb4fbe665f1c62fb58fc", 0x82}], 0x4, &(0x7f0000001b80)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}], 0x18, 0x40}, {&(0x7f0000001bc0)=@in6={0xa, 0x4e21, 0x8, @rand_addr="6b4cd3d92afb50b67e2824a3713b87c5", 0x69}, 0x1c, &(0x7f00000040c0)=[{&(0x7f0000001c00)="5f71fad59f59ae567ded9aadee1007bab1baec71feee052bba33c075fd0e26dc3cfc08bed10b53f5c5deb24d17d44aa0a5ca423bb99f3d2a76f9a6a4c98d31faf5f4215488e577c9e0d7078cbf0fd2545f6592ada8e82e671b4ed094b54258c4b7c001be3e5329ca9e41fe65a7a4fd702c00529297e8e2bbc5ca815c26970b57c26c32f6ecfb58dfd6ebb7623dde6f09df242708ebea0b94bdc18fba8694a9cf04a094d84ad3a52be70e53cf23b46ae8cf51755e9ec6bde9b6288f8a2fc0d802f37e5565951bc149068c3dfb9cc9c6eac1ca11443d361d97db56fc050cac83eabdaab0c2398e26bdac0ecfe8472d51a9248d", 0xf2}, {&(0x7f0000001d00)="8a24fdb3786602f13532ac3f09c4f08316c95a74cb31861a", 0x18}, {&(0x7f0000001d40)="dc6decf9c440f581fc7a8c0619ccd4978bfcc840fd2bd78f02b922bf97a6ebfa5a3aa1fcc85d651b9d22ee5beefa4573a7fa170f09cb7ab80b72769bf4fd7ce534d15132397b835bcd1c5b20e08e00d6cf31eb0ec6c7d7b05adaed084d91f6baf11c2a7e034f545ec6de0881c15c9d23efa806932fba89235d41a080d5b81e558e59ba8f57e66ed80c52ff45cdee233fa28568df636defdf1d6ff87e55af6d215a3fe57c2f7a84a103f9b6361a7372e8acceadd6707fa0eda18216d9ce006a54838e42c518f0c7a9300307b4c47d7499ad3b362934cec48302681dd2954d7533a29acb0a01600fdea9238dc93197a7d78d800894009770263d0e53da5cbba8c6cb4a93198bf726ee614b0a9b0f86351a8e43cc095bc098f20d15ef6f002b7c7e42b2b61836a5dfd3c243344609c799538b16edac6815303f459973a4d9171ee9e5e282dcc447f2eadba215c22c32efdb562ea7f08ce7d1004867c94930e748b291bca3eafdccf392e31b4fea17746d33b6fadafc8957451a3d792c1f550cfc42ee32e4c0336de4ff1c03e56a0d06b2134ab0ad4274cfaf4eaf14dfbe55a04282a5353210c791d50a2dee04adc0ae7325e15cfe24d0584423e3015e5ddb18e49fe9ff6144bf523a65b722de3c71da572cc1b6852ec070cf9e94e8664592338753bed54321133f6281449123a3663f1c7ad3367315dea68bf7ecfcf3b17e9b7f772803dea65abd80264fcd99829a34be9c4520af29354d412d7b9e47a665d670f7e49f870a4078587448091bfb1b84163a28f274f0a65d638ce2922b7c735a70bee0bf1206368c12e4b8ac9c64da0cc35ef2aad305f28ea266b50c28301cf702cc4843286b308269ce7bd56de315057ed3af59fca115d45cf54c05dae690036ec86d57f6a359ef73e33d2bd41a1a9b80a43d0542ed8bae26f071939fd9678aebe7e59be2e6bdf82a7c6b0b35bf4d557712b49043f9d89f4130e41bf7513eb76864410bda027425b70b02eb8220ba783bd347ef9290ff487697a658a3b3f48f30e6867b45dd142f48dbf0932d3434b67329d926b4a68f031f80f03d0f7852d46077bab9b3a38f63478ef0a3330d24f1832b45d6da4f25fbaa22a965a668830489422a87e5c719fdf6713083520b23d96f1e321bc8bbd804fc5adc66dbb04891b7b8d5f4fd7550b63b0caf705c5d131b31fe3ee854129da7b350f30c86f82082d28ea886c45ffc197c03b2c0a838b75211910f154c832cc87476e36a446d0f9283c18665713346f4a71f38804ce3ad2a56f9de5a045fb98a2fb97cb0d0ae3139846587c0e106357d9901938755cc0c566642168c8b6ece8ff873e3355565a7950808ce577a41c6cb31254b34050ec6acea1f5e1c07645aba3ff4852e0bd82db7bb2a052bafc6fee447929b8bc2b1baa7a37a9633bebaadc47ef8f0d05282d47638195e0c377c37650d4c6ef4ead027c6f941d3b8de83fbd4862b904f010e2608906d2ba61b99a26060624587a21842db314af8b0b6a637e89b8a5a97c9e53eaa2d2ef4753cdcfb3b8641ec000942f0640b8aef4809dc1cdcad2809a221dbf892935a021d8fafcf1ece021e8c8e212cde1e18ae58b0f9ac3e46f7a1f9660d0e2849f53196208cfb843cbd7ffe6560f125ccacb4fb561891aa818ab264fcc03d1ee936b9f0603beccc6ee7651914aabbf59777105ac5d495d8e44f0ebbb871c30f23af853ef8bbf1375d744851186b6b2669b761cbf9901523c07d2a251b96113474577655c06154cd9d7c2059492673ad5cf92f47193b7424d4b9253b65293ba58e881679197bb2d740e90425909fd84c88eda9a2060f1b7995f268664629878f2b3b4daebb53a8b3e089161270bb8762dcd85dbe371ae118f807bae83b97a773c1b7c63e8dcbd580c48c1e87cbfd9cb2d40654a91ccbdf1abc767efc785c1650dbc544a2eb993f646b9ecb3db046cc7cbed930dc6db5aa7a407768c4f41226b521499f941fc9f7a2af777bf4048ae77e477c10fa51f991f8de19235bafadf1a8dea1a0b271a7ceccb730fa0ec110dc6f1d271f0d02fee39f1c61f3ec11342c8e8340fed4bac2ed12db970fb6f470c3d4a032c5d2c1248465ad41de8dbe28fdeee8f01dd3ff3f85bd42f9fe7709c9c1682e53b17bb479eb83861a2df0087b5ff813e3b9104e4fb90d2568417b077180a1e8a415a1e8e70bab4b241e598b3735e054564524e3ccdb4d9ee1266d750cd671af8a585512150de8a865b822ea9d73428ce1040c8435fe29ab93937c9af53e4aed58eb84f83a8f5379b45c700a9f74d5cb33138c255430ed672b6b68cca0230f92af7e2225e76ec68ffbeecc4bd64f5de9e9804b7610150bdc85ff0adc37ed57001af9553b57b2922d090e44da433514ac3bf14dd64d351739cb192d9e9f12fd33ceeaaa8e8d837cf5c0d31be9b9a26fc91f45aebcd21cb1a23aed820d3e134aa63299aece6600340a7c9176c402980dcad1c9e55fbda8c1232d4044edb04eca9b9ceb73eb90ea0647f45dfb3747e7aa9ee74312b6a045596beb34429ac370f76f233e7ee4e3279e5c3323faeccb80a3516ee30e5dd91f691f947537c4f65e9f97b6223eb5f9f09bcbc907410487414ac926df18b666e2ab65c8bf01485e4bcf3cbb291e48f85ad3e3d1cff8a6d59bcdd303d10400aa12cf3d7ed9ec10e2ebfcc275d61a9b41cdc6dfcf91b29254304e4bdf5d3a75ce9b4f4fa60e5f88d3382b3646a8b76557290d13966e3aa184aaaf0fc658872011d8771f4b91da4176f60a1b01e40e19b667f18eb7c7928ab4f0eec37870d643cdf1ef1bc0fd8362b6356148f9fcb363664c5c290affe29433f4349345c6b978c509b0ac85719501ab81df89dbcc1bdff0b587db4688f0f1df592c6c3b4e5c1aba5ca13641031e0b13b605d2bef44510994062bb5ed74576c651f4386df7f840d2f603356cea186ab09f21d61640a433e23eccabfd21345fc2e4468fb489217e3ab63294c941100ac5ef6f9e7ba19491a2ea68c692b8c87ca8565eb2f5cc786e01067f3b244cd76a27778372e9a5b9ec0b555df45bd7642446c24053089abae7768e6ca8063d06be68c6dfd9a3356f5083b643b407c8f9fcfb16c40d3b532ced6481d4a1a6130830dfcf9707fa4a50c1af65512b7bbc9b7ab54bc13e2e8d0a6249a3ce1cf91f9332adc4829d429a96beb29481ea098d4959b1141f4bc84472c3797229e22914dc19828bf54f8c9a02102a5836babbc94bd936bf2e1b7b28a2681408ee52f574269004dc8dfb57e5dce99d3651610a5decd8ad837f25176db1182c4be39ca9e1e4848a10f726d11cc65f41060080c6e2af1a02be6af39ffca062dca461faeb410fe5ad8c7fe27a2875b16841fd27f2c47958f26f8d57e18d5735d7fc5554fad4538beda0c682f073b05b969f63b35f1e39a2ebcac8f255f803930b7474f26a929c5a82e55af776464fb3d7125936af48418d00b38f05b8bbecd6322e1b0c7409115748cb528037599b25473764a5709fb9decbaca39bd9ff4afad47fa2cf0568cd7e66b20e371449294b3010839daeacb2e862fc0f62fa7c10655a01e427f968151d92dd4b66f380aacaec8685bf5164b660c3319bbba713bb13e9a177824b950bc2cf41db3000894159cf0696a51988fedb80f2a0056b2d29aadb8d51125f8dbfa30e0fcb7821cbd118648974ed9c8b751879bfa33ded8b948b68f1b285f15ce35a9ce24745bfbadb9017637fa882dc33ee3edaf9bb31d7422f0e0a783e2a10cf8c0ef8424c4c279ef17639b7b32b404b19dde1d8337ae9b4835299d5cf9e7788e9410ca1df32f92be5d2d81f72139ff15e3fc9740f8197c58a6a09a72377c053067c6f510aa64d4d8ec09bf5aec53c86b9aea77e474cafc89d2bc77389f2470ae1564f1e8c4193ec55503274fda7698d1341a60616d1cf30a0da9cb88adab46a1aae42d5b29769cc941b9eb6ecf0f265113357eb86b91f6d0e4cc1272bd35994952f5b399606f7d56b783acdf33fe70fc00e917f0abe0aec8bfc9d2290c5adbaac9f028fe2a002ecdc3e5d775b9fa9e771b72d5b93bd948e4a8a8e6c9e0278a5f8a36e0e30d8ef9cbee49fab6d4f3d361a1acbfdc36e6222f09906b6741ca96c37cbcbd550a10dc1e066606c829c17e97d0f8d1d5ab9fd3fcb3c59d6619510c4d62ad508aa504048f58952199cb14d928ba7abff40dbd25c078934d20bb423849eebbfabef37f6482dcb673099e7f01846760ac73298fe83258a15f0ef8218c8735a74296fbbfc0b5e3d8e7bd2a82be9f5ab1f4174854426f8cac524de9043c40ff99b9e7c5d218207b233d268d21b426bce3e478e6e8440ffc237aa2af5014aaedd85d722e05545b546b16797cb8d386042d3f6139650f2aaeb1a0ad25c0c6575731dc99453e7561c9c803bd03c78951da9af65895eb16746de238470c4b5c6794e02944e13685f7bd00f4dbd02b8d968293f29b544930285605b21f7035aff065cf5fbfd4cafbbf2f62faccffc1b84ec2a6bd1417ecbb89c6db872cb0f5bbaf78ddb063f258a16a455b14772ed0b283d95ce13f536e4ccb0e73cd70bf995a72e6deff1bffbb663736b09dc55e7e811c379e57adcc67926573743a65baab77d273eb956135a37eff95e42c91b2fce32a65533a8a358707f5df7135d194a31142b014cfe746eb02af9d1e938387d82a204d86dab1f1422aced115a564a292622bfda1f49eedcbc12019bb8e570677bbbf8555bcd23d1a8f2707db93a59dfd56e8eb0616038a682a643dc5f18b23ce91fa71c7a349b63838730b9550b1685a792445f7f62fdf32b4583e4940f75632ac6f9d03a894d6e8177ac3cf83b2116974e09c463d530ad1aff7bc02e4f60de121b0e98dbffb908393bb88f19bf717db7c824efb94e71436aa7f7fae4131274f6cc7225e86fc4d4b4d4a032c14f49ea9203ccaca3ffebe5d2a3b04f92aa274830b0c2fa6ab25f211ea7fc7a217df9fe531fdc8f4e351cea875a8cb7a4c5427294358db55b130f1199032b5234a35f2cf4a45c7c5edef8e3a06609af10af0f66dcbcbcd7018dd947cab8b32da4f5ec5b01218ec3845de2155c50775442f43e3a426c99c9a152e1ed5fe19d178ba7688930ef166d7fcb8920dd0630fef88ce284c8ca1aadf2d5e57ccd7b7108013da8f601f91843baf691bce68b3a648cbdde32c7126182a70ed081332a08bb8fbf0477add8a47fa75c69a3b337bd5da38f06ae4ff791dcba766b81a0c4ea96ca00ab6c44878e2b617052a15e55d738cbeafce913d571d35443ac23abb1851a7e55d8c73b701b75b936822c332fa4b0807e5102c3fb2d0cd659437fe857030c7189ad8148360cb7f568ff0fdc109d2c26f17a1483404a48608fb4e7a324c7452a6fd59e2d8bc268bc9a3899273e58dc99a7916a55323a2b8f5314ddaf514d45871ba9a50e0b2aabc8c08990ab3d24bc09f9dcd46dc49a733e61245c3cb488bbfb9d9ef5b769aa5220b5ad19dc583fdfe1a7d737bbd64549162223f99f3afd435c12d61399f3cc67ac664396a6c64d5b4039bb2a9805d186eed90ab469d39c94bad6e7045486ed81cb95ea8c9335c5c0a000278033a62dff4ccb2e119624b57797fc6edc1cdda7f23cf21cee28e3a149ae7d3d948ceba4095ffcd4d6298f0e2c43e16fa37c5734f1355236d8682f961a29f3b8028e344156fe07a504a4e06b9ceba195e851cdbf90e106075e7e6317325bd168bf9c56cee8b7af70384a94a0b7ec976e32dca7300396d2d31f8f9a1eac593de4cb6b9fb0aad7806eec", 0x1000}, {&(0x7f0000002d40)="192ce391246d22dede2a7a39e68060a1e0f0ae64d955d005945d27e2a738a8b8453a02f830f44a53e8a95a4cacb6c96b2c813e10332a441f056630c6461c08ab748340d3cbdb1852a3270f06c460a9ea0ef26c78b2d055cacef486ae0d4e5af3f1502d95bd4b27c956e4d1ef6704e028", 0x70}, {&(0x7f0000002dc0)="102970ee508fd3ad824a6e304c5067098957704914accbd6eb0c17c623ad037a8137a7368b99c8216fea6a99eca28757733e8da52e5e00f1b9ba6163f39aea211337b6dedadbff06d36a0270ea26da2e6b66da32b3e9b367aa593c613d0e2cf24fe4e0e2a97a064d87a72369f9e232063eac472b822f580a50cf8e21cd6ba1e88182074e7b854643f57fd015b49d0131041f3c87146ae15aada21c1377f1977de5551f9a2eb4376ef9213d846c12699d30ac0f6287fafd5d36bfb7d5d4de37b5177b703e92b4775d42efd17d0e969b56dc3dbeedaddba09ecaed8574e5441b14aa29fd1543e1f73becb616aeef722a9b1186befa01938f7d17", 0xf9}, {&(0x7f0000002ec0)="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", 0x1000}, {&(0x7f0000003ec0)="bf03af6229aee6dc8a4be0f48d0179a06f8c27ae0ff25229e0f1b00dc4d55eac48a0e918d88cbdc1fbe86fcac4dbd90ae70bf11a6b443b4f0175a5e1255deea3d52522d3d5130b21d292804c72e1b2a94b8b53c67d4fe2bb690e6867964dd0b7f71a766c5d08bcb9954c018a75348b3bf184524acdc9f3f8a5933c42b06a18ffc0025d439c97488878d20203284f41c0260cd63bfb284defc518f7b5e8c189ef8f6deb363d89ccca9713756c2fa8652389291f4d1ce5a50b323a14b3d16700efa310e1d7ad5ebcce440508d7ec110aeb3a33083b60045365f7bc942bff87ca065630b5ff6d952415376ac4df3e2833a7fa62f156", 0xf4}, {&(0x7f0000003fc0)="7ce13767d30474d01683b2c33bac01442733ba8caa087e67f8e0dc46043346e0d4f9bbb662d8f38f3eea7b55f7efc4c40a918d7afcbb9c3ee330b1af61a3f4712194e76faa2908b1fdf02e3fb71288fe63a5ecfabab620768eb4e12fefd5783b652ea9c831d875a00a6e8f32fcd29e74fd5938bae6367a7fd11e3ae9397f1069e78f1ba0ee4c6891ae4599f0b19814b21ed38a9730044240857f5d2c2d3550fa0a671ae3daf1a467f14b7a111f4da181e042ab150416687cded467e91c58e6f3f86a376c0aed7ece7ec863f290c2c6a02bbe1dbe81dbc096cdaccb07a380c280", 0xe0}], 0x8, &(0x7f0000004240)=[@sndrcv={0x30, 0x84, 0x1, {0x8, 0x8, 0x8000, 0x1, 0x1, 0x3a58abd4, 0x9, 0xde, r3}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x1e}}], 0x50, 0x4}, {&(0x7f00000042c0)=@in6={0xa, 0x4e23, 0x81, @ipv4={[], [], @multicast2}, 0x98}, 0x1c, &(0x7f0000005840)=[{&(0x7f0000004300)="9ebb54c5b10f9d553252150f96953d42ef24c855ee09467fbb9527c7710752c1c53cd164cfffe565ca267379b936b45cf6d463b493786cbc8ef3e515aba13001404171cc9ce86656bba44eb27c9f418e6e305ceaefab13ac51", 0x59}, {&(0x7f0000004380)="f84bd44625159f88456bc1e13f78b9c0021aaec059b5be45befb606fecf3c057cf090fa43bc94bf86f6942070739da429977c12a11514f5b4e8caab408eeccfce818d278e0847331a5b6abfc1e53754a9a163a27232730b4f4f939ed8ea8cd45e1805c7ea8cc0550a075ee5915153dbf09dc234b", 0x74}, {&(0x7f0000004400)="6ca66f52a21271b3abc10d6776448cdb6d9874f95f21b41f06ba686f767247b3da23b4c05f0aba4cd24a623a454317efffc1415966354741f512d86877a07e904e8167717649c191008beb8c2d06b42e5ae26905011bf97957792168f5b5375e664c3fa90f6d7c2363a7f8edc7e4f53809a08e3322dd04819af7da91057a7ca69f76651a3fcb5caebc42af9b", 0x8c}, {&(0x7f00000044c0)="2db523aa914a27d1b83eaee18453578ffc2fa3e55a0e4ad026fe59f2cc47d40cd391d0552b65b12c793fb4fc3645f435d3b312524434ab6f2a25bdaa960fcb933292076390c11d85cca164d1342a5fd37dde6811c1987aecd13dad8da6fceec452efd2b37a14ad24757911e823dd4128686d8f7f2ee67431a2de4538c527ab6937206171b6b77f7fecdf47fd641e1fdd1e1cac65e9e7b1e12516f3c5a6f09bf50198603fdb693dac8beb571bac4a7c4fb25c172e4564b8ba1e16dcfda5179e14686b7524f218239f53ea68949af4f23ce2df74036186792851f0700c67cf2caf23ab53", 0xe3}, {&(0x7f00000045c0)="44bc14c2633f3bc08eb0fcecb8fe44136bf13b13fe3b332fc1ce4257ae14ba4c92e16b44527ff18a38f5391cbf69294cdf4e982a4601a34a8f29f4cc2e884b2434bd49e0340e4ec21b38c0670a3c12ba58974224e1e5fe77866501709b79a900d8f922a7c4fe39053f287e213d1b0fe2a83df9c4ec38185a40fe5bc2492af3001133acd4585c4d00b2ac0910ea322266076e7b", 0x93}, {&(0x7f0000004680)="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", 0x1000}, {&(0x7f0000005680)="73f4e7899e0270d1c136eec06b0424496aef28aab21034eb20b5e0400f8080fd63", 0x21}, {&(0x7f00000056c0)="35e0c91d128be6b850e67100d2853fb5b02f334690e3f1e2eafd3477329bb67ef9cece2bc01042b257d965f0d0e80cf2f7206ed1746d7efe0f727229724ab7d916efa8745a1c130972ed59d07eda06278d91ff731d4f0d3e11fe011b", 0x5c}, {&(0x7f0000005740)="14634ec26a88be9cd47f99fed6bf88aeed075c8a8cd34d6c424d817995481b4ae0face5c06a80199d8570e949a65439ed24b939b335b1def6371f7df07e3af91a636027400f6e022bd8766deb5b0b8b61e8baa8deb76acf0805b5e5a5e1f4fef5ab391e655a608dbce25081b43f7f588fe32c329625b8f4afd0c11d8c6a7332df33c9367b3c2ec9dd964af3a07f04d00786345abe88cc5041b87b00726970344b2c801a5625872ee8c675829be15e48ef72a5d7d60260a51c365f72a00f46f82413c09753f36e1b8d1a6", 0xca}], 0x9, &(0x7f0000005a40)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x1}}, @authinfo={0x18, 0x84, 0x6, {0x80000001}}, @init={0x18, 0x84, 0x0, {0x1, 0x4, 0x401, 0x6}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x1ff, 0x200, 0x7ff, 0x5, 0x3, 0x80000001, 0x0, r4}}], 0xa8, 0x800}], 0x4, 0x4) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) 11:34:18 executing program 4: mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x0) 11:34:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) umount2(&(0x7f00000000c0)='./file0\x00', 0xb) [ 1493.036619] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1493.076409] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" 11:34:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3"], 0x0, 0x0, 0x0}) 11:34:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4ba, 0x80) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) [ 1493.076409] [ 1493.077555] binder_alloc: allocated: 2504 (num: 291 largest: 96), free: 9784 (num: 1 largest: 9784) [ 1493.151792] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1493.160625] binder: 20107:20111 unknown command 227 [ 1493.163015] binder_alloc: allocated: 2504 (num: 291 largest: 96), free: 9784 (num: 1 largest: 9784) [ 1493.177490] binder: 20107:20111 ioctl c0306201 20000440 returned -22 [ 1493.179165] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:34:19 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1493.202769] binder_alloc: allocated: 2504 (num: 291 largest: 96), free: 9784 (num: 1 largest: 9784) [ 1493.220884] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1493.236295] binder: 20107:20116 unknown command 227 11:34:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000140)={'bro\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\xe0KU\xc4\xfc6\xb8?\x00', 0x0, 0xfffffffffffffffc, 0x4, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000100)={0xcb}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x4, 0x800) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000524700000000040000f1ffffffffffffff0800000000000000000000000000000064d316cd4b26b01dd26c8f3dfb2bfaa7ec14bb"], 0x30) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000001c0)=0x80000001) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f00000000c0)=0x200000000d767) 11:34:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x4, 0x8, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="400e0000"], 0x173, 0x0, 0x0}) [ 1493.250900] binder_alloc: allocated: 2504 (num: 291 largest: 96), free: 9784 (num: 1 largest: 9784) [ 1493.254683] binder: 20107:20116 ioctl c0306201 20000440 returned -22 11:34:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000300)={0x1, 0x0, {0x0, 0x0, 0x0, 0x7, 0xb, 0x74e1}}) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f00000001c0), 0x4) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000340)=0x5, 0x4) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000c4f2a86f7c8575a0a4feaae00aa457dc9301b2d34cbdac58200eb3b3f0d1bb31607101f9b527da59c141f48c7ec10825c63dcb768d071fd1abd0ba9c585b1c3bf36c1c4f1a3f298602167f443caf29323da5c45279e32df14577e21b07eae9a670248275765eb28530739d224891892a08b48625c7908ed8d6d78294c63ae440160c6ed8c491eaf583b6566f9a34c94f686663e5f119996c594b3ffc8ef31379ae6d0706d1d1259db08d68ab"], 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="00fb4c0007652001e2ee63e1ac458dc0cee98210cea63f88a5e40da367e31e2e8a1273140f65d576b20a91fb0e4c63f6264cb1f50e6c5478d4d50a2996d8"], 0x4c, 0x3) 11:34:19 executing program 4: mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x0) 11:34:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000380)) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5, 0x80) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000340)={0x3, 0x9, 0x0, 0x84800, r2}) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000040)="8a38c0174b6038fec7d6279de7597d35f288ad336e5b1e38719c7ac77b08b674ddb5ff0c91823296fac2b95fd7e03cd5c5d9542eb8469698f2211879c622811d77f80d8636ada6f1661f86771ca5ab21b853ff4784a2e240498b966e485d10a86503c12f5fe751") ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000003c0)={0x3, 0x0, [{}, {}, {}]}) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @rand_addr=0x9}, 0x100000000}}}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000002c0)={r3, 0x2, "fcb3"}, &(0x7f0000000300)=0xa) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0xf8ef}) [ 1493.340123] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1493.340123] [ 1493.352189] net_ratelimit: 17 callbacks suppressed [ 1493.352194] protocol 88fb is buggy, dev hsr_slave_0 [ 1493.352241] protocol 88fb is buggy, dev hsr_slave_1 [ 1493.379906] binder: 20132:20136 unknown command 3648 11:34:19 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) [ 1493.424476] binder: 20132:20136 ioctl c0306201 20000440 returned -22 [ 1493.430006] rtc_cmos 00:00: Alarms can be up to one day in the future 11:34:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xffffffffffffffe0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="22e04040"], 0x0, 0x0, 0x0}) 11:34:19 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1493.468271] binder: 20132:20142 unknown command 3648 11:34:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000000)) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000080)=0x778b) 11:34:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x4, [0xff, 0x1f, 0x100, 0x8000]}, 0xc) [ 1493.517958] binder: 20132:20142 ioctl c0306201 20000440 returned -22 11:34:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000100)) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000180)=0xe112, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="fb3fe7f9bd29e6ba129c53b671b38512611ca27f9c18bba305e97797ede046aa72ae7fad7f8449a95714fa820c8b0bc5049e2efc6a8842ee9b75f28d4929c49f73dfa1139649e36a1797e4ea681089ea762f02273e23f2aa3a703a77cba09b1e7e4db578a4583b9546a8094dff4073715d719f35fc95ed05362742e5f15a93db6313017adb1a418d46de15a910b85c311c830cdf328e3eb10ffacba695"], 0x0, 0x0, 0x0}) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000140)={0x57}) 11:34:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x7ff, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x10060, 0x1, 0xffffffff00000000, 0x598, 0x200, 0x2, 0x400000004000, 0x80, 0x6, 0x4, 0x7, 0x1, 0x5, 0x9, 0x1, 0x8, 0x3ff, 0x7, 0x80, 0x100000001, 0x401, 0x2, 0x0, 0x4040, 0x8, 0x101, 0x3, 0x9, 0x8001, 0xa6, 0x0, 0x6, 0x2, @perf_config_ext={0x6, 0x80}, 0x20000, 0x0, 0x8e, 0xe, 0x9, 0x3, 0x100000001}, r2, 0xf, r1, 0x1) [ 1493.588102] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1493.588102] [ 1493.590119] protocol 88fb is buggy, dev hsr_slave_0 [ 1493.600175] protocol 88fb is buggy, dev hsr_slave_0 [ 1493.605122] protocol 88fb is buggy, dev hsr_slave_1 [ 1493.610135] protocol 88fb is buggy, dev hsr_slave_1 11:34:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={r1, 0x1}) [ 1493.678922] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1493.686235] binder: 20170:20176 unknown command -102285317 [ 1493.701405] binder: 20170:20176 ioctl c0306201 20000440 returned -22 [ 1493.712308] binder: 20170:20178 unknown command -102285317 [ 1493.718282] binder: 20170:20178 ioctl c0306201 20000440 returned -22 11:34:19 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40a840, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:34:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000380)=""/176, 0xb0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000680)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0005aa24201bd9e5455440177cb2d2836b5873622304a6a117ad6a00"/42], 0x0, 0x0, 0x0}) r2 = syz_open_dev$midi(&(0x7f0000000700)='/dev/midi#\x00', 0x401, 0x200001) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @broadcast}, &(0x7f0000000480)=0xc) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000140)) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/context\x00', 0x2, 0x0) recvfrom$rxrpc(r2, &(0x7f0000000280)=""/252, 0xfc, 0x12102, &(0x7f0000000180)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000005c0)={r2, r2, 0x1076, 0xda, &(0x7f00000004c0)="021f2203f4362a0b94236b4a88258cd2835a10b92da8522f898c76d2bd27a59ec0cfa84f142eec1b08482f935a94e2448387998bf6d36fef27c57946f87488756ca89e0caff4f3e6e4baf87f2936226f3017b0992c54962ce61f629d7ea328441825a4be6c76ab8d71f0075a28980083ff37263b442386ccf0691a3cf0607daa68c6db0844bd446274c9d95c1684073c7d216ef6f424d86a0df0fe5cb4aea5e6b39c5e1159a0fe02998b5b045d382f350044bca09459ca8443098358759485336fbbcec3b3dde965052fd6ed705167a2dab1f2cc10ffe18d9a65", 0x10001, 0x0, 0x2, 0x3, 0x6, 0x2, 0x6, 'syz1\x00'}) [ 1493.728280] binder_alloc: allocated: 2504 (num: 291 largest: 96), free: 9784 (num: 1 largest: 9784) [ 1493.833450] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1493.833450] [ 1493.834993] binder: 20189:20195 unknown command 615122176 [ 1493.861542] binder: 20189:20195 ioctl c0306201 20000440 returned -22 11:34:19 executing program 4: semop(0x0, &(0x7f0000000140)=[{0x0, 0xfffffffffffefff8}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 11:34:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x280000, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000100)=""/180, &(0x7f00000001c0)=0xfffffffffffffd9f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:19 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x8, 0x1, 0x1, &(0x7f0000ffd000/0x3000)=nil, 0x5ff}) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) 11:34:19 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]}}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:34:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1493.888152] binder: 20189:20195 unknown command 615122176 [ 1493.894508] binder: 20189:20195 ioctl c0306201 20000440 returned -22 11:34:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x103000, 0x0) bind$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @host}, 0x10) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x40000, 0x2040) [ 1493.977360] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1494.008951] binder_alloc: allocated: 2528 (num: 294 largest: 96), free: 9760 (num: 1 largest: 9760) 11:34:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00X@@'], 0x0, 0x0, 0x0}) 11:34:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@b'], 0x0, 0x0, 0x0}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x100, 0x4) [ 1494.022909] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1494.036764] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1494.036764] [ 1494.061321] binder_alloc: allocated: 2536 (num: 295 largest: 96), free: 9752 (num: 1 largest: 9752) 11:34:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000040)={0x7b, 0x0, [0xd9b1, 0x80000001, 0x90e, 0x3800]}) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x4}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000140)={r2, 0x30, 0x59, "4572f9d9747e8be9651500ca5f80b8579babbde80121305a043ee97e7b9f459964eefdcd4de2dea0325bf932fb933b5bfa80a22afcdd82d3c420fdfaed71926935f7198adc2166fba43d860a76bf62162e2e98dc259d3d9aab"}, 0x61) 11:34:20 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:34:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x2, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x3, 0x0, [{0x7, 0x0, 0x0, 0x0, @irqchip={0x23, 0x2}}, {0xd7f, 0x0, 0x0, 0x0, @irqchip={0x8, 0x78a5}}, {0x0, 0x7, 0x0, 0x0, @irqchip={0x57, 0x3}}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0}) 11:34:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) preadv(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000400)=""/115, 0x73}], 0x2, 0x0) [ 1494.147457] binder: 20229:20234 unknown command 1077958656 [ 1494.173492] binder: 20229:20234 ioctl c0306201 20000440 returned -22 [ 1494.209318] binder: 20230:20235 unknown command 1648386816 [ 1494.230114] protocol 88fb is buggy, dev hsr_slave_0 [ 1494.235361] protocol 88fb is buggy, dev hsr_slave_1 [ 1494.238258] binder: 20230:20235 ioctl c0306201 20000440 returned -22 [ 1494.240589] protocol 88fb is buggy, dev hsr_slave_0 [ 1494.252052] protocol 88fb is buggy, dev hsr_slave_1 [ 1494.257769] binder: 20230:20241 unknown command 1648386816 [ 1494.259848] binder: 20229:20247 unknown command 1077958656 [ 1494.266326] binder: 20243:20248 unknown command 0 [ 1494.272290] binder: 20229:20247 ioctl c0306201 20000440 returned -22 [ 1494.280910] binder: 20230:20241 ioctl c0306201 20000440 returned -22 11:34:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) uname(&(0x7f0000000440)=""/1) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [{0x2, 0x5, r1}, {0x2, 0x1, r2}, {0x2, 0x0, r3}], {0x4, 0x1}, [{0x8, 0x3, r4}], {}, {0x20, 0x1}}, 0x44, 0x3) 11:34:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) recvfrom$llc(r1, &(0x7f0000000100)=""/202, 0xca, 0x140, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1494.304499] binder: 20243:20248 ioctl c0306201 20000440 returned -22 [ 1494.305123] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1494.305123] 11:34:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0xfffffffffffffdb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x22, &(0x7f0000000140), &(0x7f0000000180)=0x10) 11:34:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00630100"], 0x0, 0x0, 0x0}) 11:34:20 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:34:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = shmget$private(0x0, 0x10000, 0x200, &(0x7f0000fee000/0x10000)=nil) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f00000000c0)={0x10, 0x0, 0x8}, 0x10) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/123) getsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000100)={@local, @multicast1}, &(0x7f0000000140)=0x120) 11:34:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e23, @multicast2}], 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r0, 0x4c01) close(r1) [ 1494.491736] binder: 20270:20280 unknown command 90880 11:34:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0xa4f, 0x1, 0x0) r2 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0xc7ab, 0x8, 0x5, 0xe9, 0x0, 0x2b, 0x10400, 0x9, 0x7, 0xf2a6, 0x2, 0x3, 0xfffffffffffffffc, 0x6, 0xfffffffffffffffe, 0xc66, 0xe2, 0x5, 0xffffffffffff5e12, 0x5, 0x1ff, 0x5, 0x0, 0x6, 0x6, 0x6, 0x3, 0x7fff, 0x40000000, 0x1f, 0x7fff, 0x7ff, 0x1, 0xf0, 0x2, 0x81, 0x0, 0x4, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x4120, 0x0, 0x84e, 0x1, 0xfff, 0x6, 0x1ff}, r2, 0xffffffffffffffff, r1, 0xb) [ 1494.556937] binder: 20270:20280 ioctl c0306201 20000440 returned -22 [ 1494.564420] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1494.564420] 11:34:20 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:34:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 11:34:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x70, 0x0, &(0x7f0000000180)) 11:34:20 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x4, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000140)={[{0x1, 0x7f, 0x1, 0x8, 0xcec3, 0x9cfe, 0x6, 0x3, 0x2, 0xf9, 0x3f, 0x1}, {0x0, 0x7fffffff, 0x8001, 0xffffffffffffff81, 0x8, 0x4, 0x4, 0x0, 0x4, 0x3, 0x5, 0x80000001, 0xae8}, {0xffff, 0x400, 0x7, 0x8, 0x6, 0x8, 0x4e9, 0x0, 0x3, 0x13, 0x6, 0x1f, 0xb57}], 0x7fffffff}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0xa0880, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = semget(0x2, 0x4, 0x0) semop(r2, &(0x7f00000001c0)=[{0x7, 0x1, 0x800}, {0x1, 0x3ff, 0x800}, {0x1, 0x3, 0x1000}, {0x7, 0x8, 0x800}, {0x3, 0x6, 0x800}, {0x3, 0x8, 0x1000}, {0x0, 0x8, 0x3977f50e28ed179e}], 0x7) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x2) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) [ 1494.723326] print_req_error: I/O error, dev loop0, sector 0 [ 1494.729742] Buffer I/O error on dev loop0, logical block 0, lost async page write 11:34:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 11:34:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r0, 0x4c01) close(r1) 11:34:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x40002, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) getpeername(0xffffffffffffffff, &(0x7f0000000340)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000003c0)=0x80) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)={@broadcast, @dev, 0x0}, &(0x7f0000000480)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000640)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001b00)={@initdev, 0x0}, &(0x7f0000001b40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001b80)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001c00)={'gretap0\x00', 0x0}) recvmmsg(r1, &(0x7f0000004380)=[{{&(0x7f0000001d00)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/49, 0x31}, {&(0x7f0000002dc0)=""/165, 0xa5}, {&(0x7f0000002e80)=""/47, 0x2f}, {&(0x7f0000002ec0)=""/20, 0x14}, {&(0x7f0000002f00)=""/130, 0x82}, {&(0x7f0000002fc0)=""/120, 0x78}, {&(0x7f0000003040)=""/101, 0x65}], 0x8, &(0x7f0000003140)=""/225, 0xe1}, 0xffffffff}, {{&(0x7f0000003240)=@can, 0x80, &(0x7f0000003340)=[{&(0x7f00000032c0)=""/113, 0x71}], 0x1, &(0x7f0000003380)=""/4096, 0x1000}}], 0x2, 0x10101, &(0x7f0000004400)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004440)={'team0\x00', 0x0}) getsockname(0xffffffffffffffff, &(0x7f0000004680)=@hci={0x1f, 0x0}, &(0x7f0000004700)=0x80) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000004740)={@ipv4={[], [], @initdev}, 0x0}, &(0x7f0000004780)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004c00)={'vcan0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000004ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004f00)=0x14) getsockname$unix(r2, &(0x7f0000000180)=@abs, &(0x7f0000000280)=0x6e) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004f40)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000009580)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000009680)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000097c0)={@empty, 0x0}, &(0x7f0000009800)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000009840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000009880)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000098c0)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f00000099c0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000009a00)={'veth0_to_team\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f000000a280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f000000a240)={&(0x7f0000000680)=ANY=[@ANYBLOB="e8070000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000100000008000100", @ANYRES32=r5, @ANYBLOB="2c01020038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400ff00000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f6164636173740000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r6, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000180000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000300000008000100", @ANYRES32=r8, @ANYBLOB="f00002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004003163000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400880b000008000100", @ANYRES32=r11, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000800000008000100", @ANYRES32=r12, @ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004006b0e00003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r14, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r15, @ANYBLOB="640202003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c00040000100000faffffff3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400050000000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000800000008000600", @ANYRES32=r17, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000000010038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040001000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000200000008000600", @ANYRES32=r18, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r19, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000008000008000600", @ANYRES32=r20, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b75700000000008000100adee21b9fac4dba7991f31dc00b00f499d", @ANYRES32=r21, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400ced6000008000100", @ANYRES32=r22, @ANYBLOB="b400020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040000040000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r23], 0x7e8}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1494.774666] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1494.774666] 11:34:20 executing program 1: syz_mount_image$reiserfs(0x0, &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:34:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000000180)) 11:34:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)={0x3f, 0xffff, 0x8, 0x0, 0x3cd}) r1 = dup2(r0, r0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x20000, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280), &(0x7f00000002c0)=0x4) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x0, 0x8001, 0x4ac12255, 0x400, 0x0, 0x8, 0x8000, 0xc, 0x2, 0xea, 0x6, 0x200, 0xa14, 0xda, 0x6, 0x1f, 0x95, 0x100000000, 0x34f4e19a, 0x40a2, 0x1000, 0xafb4, 0x8, 0x4, 0x5, 0x69a, 0x8, 0x10000, 0x0, 0x8, 0x900, 0x5, 0x9af9, 0x0, 0x8, 0x4d3, 0x0, 0x8, 0x0, @perf_config_ext={0x7, 0xfffffffffffffffd}, 0x200, 0x61, 0x6, 0xf, 0x5, 0x4, 0x8}, r2, 0x10, r3, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 11:34:20 executing program 3: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) [ 1494.990590] binder: 20339:20345 ioctl 801c581f 20000140 returned -22 [ 1495.015508] print_req_error: I/O error, dev loop0, sector 232 [ 1495.021647] Buffer I/O error on dev loop0, logical block 29, lost async page write 11:34:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="c1", 0x1, 0xfffffffffffffffc) keyctl$update(0x2, r0, &(0x7f0000000240)="19", 0x1) 11:34:20 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) read(r0, &(0x7f0000000100)=""/154, 0x9a) ioctl$VIDIOC_DQBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0xb, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "17e33d5d"}, 0x0, 0x0, @planes=0x0, 0x4}) [ 1495.059261] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1495.070387] binder_alloc: allocated: 2568 (num: 299 largest: 96), free: 9720 (num: 1 largest: 9720) [ 1495.078489] binder: 20339:20345 ioctl 540f 200000c0 returned -22 11:34:20 executing program 1: syz_mount_image$reiserfs(0x0, &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:34:21 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000040)={0x3, @remote}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x5, 0x90, 0xffffffffffffff01, 0x5822}) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000080)) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) [ 1495.130771] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:34:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x4000, 0x0) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000100)) io_setup(0x0, &(0x7f0000000140)=0x0) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x6, r1, &(0x7f0000000280)="755dfeef02f000f7207cceb8c68eca2db87a2b8a392a72a01ae229455a4e241f6e49c7b320aea221d1bcb017933c90125131eea193e86c646483ee93be2db35e5771fc5b20e4cd4baff0fa1c20354733cb611b454ab5a2a4b2f770c6ea71b251f1681542e64ca9f50fdfc1e1abdbc2f4ec27060dc201737d78898dd9af0a33ae74dff2375881ddd612ec0736ae518896e1e6d5a72a8cd690e4f01a795759a458f570a5ae04516dab8053af5a9196300d8fe5125ab29e8e43ebbf9b8ef66a7637f3fa386efd20ca3764b1aac808568f5e441fb8ad9ef37502f821d8b6de82cab239f9681beb212120907d3d3080e6bbbcb695e86d7da5", 0xf6, 0x6, 0x0, 0x2, r1}, &(0x7f0000000380)) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f00000001c0)={0x8, 0xa83}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1495.190678] binder_alloc: allocated: 2568 (num: 299 largest: 96), free: 9720 (num: 1 largest: 9720) [ 1495.244390] binder: 20339:20355 ioctl 540f 200000c0 returned -22 [ 1495.253885] binder: 20339:20345 ioctl 801c581f 20000140 returned -22 11:34:21 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000080)={0x0, 0x6}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="c916cb0500000009c9d15132cb6fa5c9f22392a31145ad089912473eba0faf4e2b9c24a27e7ac4de3b30e1a2778390045d10aaddd16fb505b1b9"]) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) alarm(0xffffffffffff8d36) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, &(0x7f0000000080)) listen(r3, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r2, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) preadv(0xffffffffffffffff, &(0x7f0000000780)=[{0x0}], 0x1, 0x0) bind$unix(r0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000004c0), 0xc3) [ 1495.296552] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:34:21 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) read(r0, &(0x7f0000000100)=""/154, 0x9a) ioctl$VIDIOC_DQBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0xb, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "17e33d5d"}, 0x0, 0x0, @planes=0x0, 0x4}) 11:34:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={0x0, 0x0, 0x36f00499}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={r1, r2, 0x5}) 11:34:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r1, &(0x7f0000000280)="1ce833dc046949f0bfe1364d1461fffb758ba2714dcada51a818a73ba11c44a0ac6ac07d1459284fc688b8074b2814e71cda02e4fb752901faa76f612bbd165b0defba067680561c5ccb0eed2dd3bb1e1934dd72b72e2a8a680bbdf91cb70ef5cae536e3a50a19560434e821c05ce774c28c0d38b61a82542ecba34f16fb2309ebf5ac08701e076765d7f58b5bd6cd7b6c801e2edbc0e3e34e4635ff610231baa862df26bc10ff1f88c0ec7259adf2b59d9b14cbeec3b1d734b83a72c383e909aa404ab20264", &(0x7f0000000480)=""/4096}, 0x18) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8400, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1495.362808] binder_alloc: allocated: 2568 (num: 299 largest: 96), free: 9720 (num: 1 largest: 9720) 11:34:21 executing program 1: syz_mount_image$reiserfs(0x0, &(0x7f0000000280)='./file0\x00', 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 1495.452310] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1495.465513] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 11:34:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 11:34:21 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) read(r0, &(0x7f0000000100)=""/154, 0x9a) ioctl$VIDIOC_DQBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0xb, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "17e33d5d"}, 0x0, 0x0, @planes=0x0, 0x4}) [ 1495.510449] binder_alloc: allocated: 2568 (num: 299 largest: 96), free: 9720 (num: 1 largest: 9720) 11:34:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x4, 0x0, [], 0x100000000000012d, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00a@@'], 0x0, 0x0, 0x0}) 11:34:21 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', 0x0, 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:34:21 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) read(r0, &(0x7f0000000100)=""/154, 0x9a) ioctl$VIDIOC_DQBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0xb, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "17e33d5d"}, 0x0, 0x0, @planes=0x0, 0x4}) [ 1495.622177] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1495.638856] binder_alloc: allocated: 2568 (num: 299 largest: 96), free: 9720 (num: 1 largest: 9720) 11:34:21 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000080)={0x0, 0x6}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="c916cb0500000009c9d15132cb6fa5c9f22392a31145ad089912473eba0faf4e2b9c24a27e7ac4de3b30e1a2778390045d10aaddd16fb505b1b9"]) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) alarm(0xffffffffffff8d36) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, &(0x7f0000000080)) listen(r3, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r2, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) preadv(0xffffffffffffffff, &(0x7f0000000780)=[{0x0}], 0x1, 0x0) bind$unix(r0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000004c0), 0xc3) [ 1495.742363] binder: 20422:20426 unknown command 1077960960 11:34:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000280)={{0x6, 0x3, 0x4, 0x38d2, 'syz1\x00', 0x46}, 0x6, 0x33, 0x400, r2, 0x4, 0x3f, 'syz1\x00', &(0x7f0000000100)=['/dev/binder#\x00', '/dev/binder#\x00', 'em1keyring\x00', 'selinuxsystem\x00'], 0x33, [], [0x20, 0x0, 0x6, 0x4]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="ff62403d"], 0x0, 0x0, 0x0}) 11:34:21 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000080)={0x0, 0x6}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="c916cb0500000009c9d15132cb6fa5c9f22392a31145ad089912473eba0faf4e2b9c24a27e7ac4de3b30e1a2778390045d10aaddd16fb505b1b9"]) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) alarm(0xffffffffffff8d36) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, &(0x7f0000000080)) listen(r3, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r2, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) preadv(0xffffffffffffffff, &(0x7f0000000780)=[{0x0}], 0x1, 0x0) bind$unix(r0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000004c0), 0xc3) [ 1495.794594] binder: 20422:20426 ioctl c0306201 20000440 returned -22 [ 1495.832313] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 11:34:21 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0xb, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "17e33d5d"}, 0x0, 0x0, @planes=0x0, 0x4}) 11:34:21 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', 0x0, 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 1495.882928] binder: 20422:20440 unknown command 1077960960 11:34:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000140)="0f06263e0f300f01c426f30fc776130f01c5f30fc7b4cd08000000e300c4c3fd01bcfc7ff800002e0f7938f4", 0x2c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000100)=0x40) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1495.936558] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1495.944331] binder: 20422:20440 ioctl c0306201 20000440 returned -22 [ 1495.960991] binder: 20437:20446 unknown command 1027629823 11:34:21 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', 0x0, 0xffffffff00000001, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:34:21 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0xb, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "17e33d5d"}, 0x0, 0x0, @planes=0x0, 0x4}) 11:34:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x3ff, 0x7f, 0x0, 0x0, 0x2, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffff7d}, 0x0, 0xd, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f00000000c0), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1496.037779] binder: 20437:20446 ioctl c0306201 20000440 returned -22 11:34:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60fc, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) [ 1496.136545] binder: 20437:20463 unknown command 1027629823 [ 1496.157531] binder_alloc: 25489: binder_alloc_buf size 2305843833847414784 failed, no address space 11:34:22 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0xb, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "17e33d5d"}, 0x0, 0x0, @planes=0x0, 0x4}) 11:34:22 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x7, &(0x7f0000000780)=[{&(0x7f00000002c0)="a211147858bf5b5a4d727fc64216460341e2aa08aabde953b480fad9eea01c3350b65bd9940b83ae83571fbb43442e672658edac1b9d5a02febbfa413250a24c8217afa5676f9f0676a9c590329c67f3d6aae80b9d0102efc172e50a511593416e7dc4", 0x63, 0x5}, {&(0x7f0000000480)="33e310528284ec849f343becd3816cd0c4a235ad0ea09ab80b543637f6a9f95517257f210a9799234bc1e2835ee75c9d24cf33b5cca663bb62893d8815cda0274968b38871b220a5c7a0563e99e9f29781d77ff906f13c171768f30072b91d774dd590a06e32945568f1348871d688c9bacdb287f51f385b910700b608015f47951bf83332ed19503ed08616c4e132def19acf8c267fbc72f5a0", 0x9a}, {&(0x7f0000000540)="fbfab461a3f61e13c505a12c471d73f872fe435193d55ee22593882ce784f330083ce691b19c3b44ae3d24271f7703feeab2a85cbdc49bb9e9d65b0d90ce4ecefff50260435dc29c081aa4328387eb52c02b81c9b3363518f31cdbdd119d6e14aa9d872128d3e4c83a1d176e444b54146f1cae0c6c965ff4c7c061c0cbf1", 0x7e, 0x3}, {&(0x7f00000005c0)="baa11f82bba14fae9ca801c0d0989085206d2ee332a969881ccbbb714210c6e760ea449be7032f58bf905aead8d64ffcc9a4071bc553c373dee80ee37514831056d38d3ee2a94226cdd7d5b36003e0f8b5d90e9befdcb13ac3e8cabcfb4813650c75087ccb27967f95726d7e50daf9", 0x6f, 0xfffffffffffffffa}, {&(0x7f0000000340)="69dea191d539e47d721e15aa31c022bcc1a662aaba58ac571e2f73c3a4", 0x1d, 0x7fff}, {&(0x7f0000000640)="efe84d1a9a9ed6e205cf770de86da55ba9a275b6eac244678755e39c38614624b4c9cec73c9846f9fc9010bcb9e90d8523660355723bf4c775ff80f506b195d772850a95e13dc2b1062e92929848024bbabb72de2ebd5d45a1c5f19b6a0f58b44b1632c5830b10651b63be86ec23350e09e3a6866a4787f25aa7c5576138335d378b672f0979cce535982bfa01d50c87d652356524452db9555f20f3f3746a3c5b5a3c8169d8430899d52f44a38a439184b41ec86228c376d953", 0xba, 0x80000000}, {&(0x7f0000000700)="1b019af01e4ec40dd8e7b8fd72c7ef77216ffe4504e0f537a6deda2007c28c1976a9d1052a2cfb0f005f7811ce40d5ba8a367e9e3233dbda38f3373a5bc7deec749865f82d5e3ae722d9ad05eeaf0e20a8aba19f8cea062fbea20466d98d96bbc5f5ba495a2b6888c18ed230d34a338540bcdc2a7dde684c163a", 0x7a, 0x390000000}], 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 1496.184997] binder: 20437:20463 ioctl c0306201 20000440 returned -22 [ 1496.198154] binder_alloc: allocated: 2568 (num: 299 largest: 96), free: 9720 (num: 1 largest: 9720) [ 1496.209016] kvm [20454]: vcpu0, guest rIP: 0x142 disabled perfctr wrmsr: 0xc2 data 0x1 11:34:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000180), 0xf0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 11:34:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x84000) accept$inet(r1, 0x0, &(0x7f0000000100)) r2 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000140)="7035cc19ba1e84ec32309cc428cbc09365c0995477130a4a195136ecc59a51f2cccb6097d16f439208e9b1c2", 0x2c, 0xfffffffffffffff8) r3 = request_key(&(0x7f0000000180)='logon\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000280)='/dev/binder#\x00', 0xfffffffffffffffa) r4 = add_key(&(0x7f00000002c0)='encrypted\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000340)={r2, r3, r4}, &(0x7f0000000380)=""/43, 0x2b, &(0x7f0000000400)={&(0x7f00000003c0)={'sha224-ssse3\x00'}, &(0x7f0000000480)="d6a91ed974d7e43b9e32d1f05c851d120249a70683adf5594e51144c322cbaa719b0ccd89ba084ecb3acf3caeb1e8f03e7fdb80eda96ccae8f884c05e28d37fef8a40e5d998c7f", 0x47}) 11:34:22 executing program 5: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x6, 0x0, 0x27) 11:34:22 executing program 4: read(0xffffffffffffffff, &(0x7f0000000100)=""/154, 0x9a) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x0, 0xb, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "17e33d5d"}, 0x0, 0x0, @planes=0x0, 0x4}) 11:34:22 executing program 3: socket$isdn(0x22, 0x3, 0x12) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000240)={0xa3d, 0x0, 0x7}) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000400)=@assoc_value, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x6, 0x0, 0x27) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x3ff, 0x800d, 0x9, 0x9}, &(0x7f0000000080)=0x10) [ 1496.419312] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1496.419312] [ 1496.436859] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space [ 1496.541424] binder_alloc: allocated: 2568 (num: 299 largest: 96), free: 9720 (num: 1 largest: 9720) 11:34:22 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x4000, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:34:22 executing program 4: read(0xffffffffffffffff, &(0x7f0000000100)=""/154, 0x9a) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x0, 0xb, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "17e33d5d"}, 0x0, 0x0, @planes=0x0, 0x4}) 11:34:22 executing program 2: r0 = socket(0x11, 0x803, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) lsetxattr(0x0, &(0x7f0000faffe7)=@known='security.capability\x00', 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in6, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in6=@ipv4}}, &(0x7f0000000400)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000780)={{{@in6, @in=@dev}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000540)=0xe8) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000980), &(0x7f00000009c0)=0xc) fstat(r1, &(0x7f0000000a80)) geteuid() getresgid(&(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)) getgid() fstat(r0, &(0x7f0000000bc0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c40), &(0x7f0000000c80)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) vmsplice(r1, &(0x7f00000003c0)=[{0x0}], 0x1, 0xa) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x1ff, 0x4) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000000c0), 0x2ba) recvmsg(r2, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000100)=0x100000000000cf50, 0x4) [ 1496.650875] binder_alloc: 25489: binder_alloc_buf size 2305843009213693952 failed, no address space 11:34:22 executing program 5: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x6, 0x0, 0x27) 11:34:22 executing program 4: read(0xffffffffffffffff, &(0x7f0000000100)=""/154, 0x9a) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x0, 0xb, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "17e33d5d"}, 0x0, 0x0, @planes=0x0, 0x4}) [ 1496.696762] binder_alloc: allocated: 2568 (num: 299 largest: 96), free: 9720 (num: 1 largest: 9720) [ 1496.710856] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1496.710856] 11:34:22 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={[{@tails_off='tails=off'}, {@noattrs='noattrs'}, {@balloc_border='block-allocator=border'}, {@commit={'commit', 0x3d, 0x7}}, {@tails_small='tails=small'}, {@commit={'commit', 0x3d, 0xe2}}, {@resize_auto='resize=auto'}, {@data_writeback='data=writeback'}, {@errors_continue='errors=continue'}, {@grpjquota='grpjquota'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic'}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:34:22 executing program 4: r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) read(r0, &(0x7f0000000100)=""/154, 0x9a) ioctl$VIDIOC_DQBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0xb, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "17e33d5d"}, 0x0, 0x0, @planes=0x0, 0x4}) 11:34:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x7ff, 0x410000) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x80000000000000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000180)={{0x4, 0x1, 0x9, 0x3, 0x6, 0x2000}, 0xe1e5, 0x7, 0x101}) 11:34:22 executing program 4: r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) read(r0, &(0x7f0000000100)=""/154, 0x9a) ioctl$VIDIOC_DQBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0xb, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "17e33d5d"}, 0x0, 0x0, @planes=0x0, 0x4}) [ 1496.989487] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1496.989487] 11:34:22 executing program 4: r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) read(r0, &(0x7f0000000100)=""/154, 0x9a) ioctl$VIDIOC_DQBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0xb, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "17e33d5d"}, 0x0, 0x0, @planes=0x0, 0x4}) 11:34:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01010000"], 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200, 0x11) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100)=0x7, 0x4) [ 1497.260725] binder: 20550:20552 unknown command 257 [ 1497.299386] binder: 20550:20552 ioctl c0306201 20000440 returned -22 11:34:23 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 1497.353417] binder: 20550:20552 unknown command 257 [ 1497.366083] binder: 20550:20552 ioctl c0306201 20000440 returned -22 [ 1497.466754] ================================================================== [ 1497.474523] BUG: KASAN: global-out-of-bounds in strscpy+0x20e/0x2c0 [ 1497.480946] Read of size 8 at addr ffffffff8677e1f8 by task syz-executor.1/20559 [ 1497.488482] [ 1497.490119] CPU: 1 PID: 20559 Comm: syz-executor.1 Not tainted 4.14.134 #30 [ 1497.497223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1497.506586] Call Trace: [ 1497.509185] dump_stack+0x138/0x19c [ 1497.512826] ? strscpy+0x20e/0x2c0 [ 1497.516376] print_address_description.cold+0x5/0x1dc [ 1497.521576] ? strscpy+0x20e/0x2c0 [ 1497.525122] kasan_report.cold+0xa9/0x2af [ 1497.529279] __asan_report_load8_noabort+0x14/0x20 [ 1497.534215] strscpy+0x20e/0x2c0 [ 1497.537595] prepare_error_buf+0x94/0x1aa0 [ 1497.541843] ? __lock_is_held+0xb6/0x140 [ 1497.545914] ? scnprintf_le_key+0x600/0x600 [ 1497.550291] __reiserfs_warning+0x9f/0xb0 [ 1497.554444] ? reiserfs_printk+0xd0/0xd0 [ 1497.558508] ? __bread_gfp+0x63/0x290 [ 1497.562313] ? __brelse+0x50/0x60 [ 1497.565772] ? read_super_block+0x11d/0x8c0 [ 1497.570101] reiserfs_fill_super+0xa71/0x2b20 [ 1497.574607] ? finish_unfinished+0x1010/0x1010 [ 1497.579219] ? snprintf+0xa5/0xd0 [ 1497.582679] ? set_blocksize+0x270/0x300 [ 1497.586739] ? ns_test_super+0x50/0x50 [ 1497.590633] mount_bdev+0x2be/0x370 [ 1497.594277] ? finish_unfinished+0x1010/0x1010 [ 1497.598861] get_super_block+0x35/0x40 [ 1497.602853] mount_fs+0x97/0x2a1 [ 1497.606228] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1497.610731] do_mount+0x417/0x27d0 [ 1497.614277] ? copy_mount_options+0x5c/0x2f0 [ 1497.618691] ? rcu_read_lock_sched_held+0x110/0x130 [ 1497.623713] ? copy_mount_string+0x40/0x40 [ 1497.627954] ? copy_mount_options+0x1fe/0x2f0 [ 1497.632461] SyS_mount+0xab/0x120 [ 1497.635918] ? copy_mnt_ns+0x8c0/0x8c0 [ 1497.639807] do_syscall_64+0x1e8/0x640 [ 1497.643690] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1497.648579] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1497.653927] RIP: 0033:0x45c27a [ 1497.657098] RSP: 002b:00007f3401070a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1497.664787] RAX: ffffffffffffffda RBX: 00007f3401070b40 RCX: 000000000045c27a [ 1497.672135] RDX: 00007f3401070ae0 RSI: 0000000020000280 RDI: 00007f3401070b00 [ 1497.679617] RBP: 0000000000000000 R08: 00007f3401070b40 R09: 00007f3401070ae0 [ 1497.686871] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003 [ 1497.694135] R13: 00000000004c8a7f R14: 00000000004df8b8 R15: 00000000ffffffff [ 1497.701410] [ 1497.703024] The buggy address belongs to the variable: [ 1497.708370] __func__.31301+0x2dd8/0x3a60 [ 1497.712501] [ 1497.714107] Memory state around the buggy address: [ 1497.719016] ffffffff8677e080: 01 fa fa fa fa fa fa fa 01 fa fa fa fa fa fa fa [ 1497.726363] ffffffff8677e100: 00 00 00 00 00 07 fa fa fa fa fa fa 00 00 00 07 [ 1497.733743] >ffffffff8677e180: fa fa fa fa 00 fa fa fa fa fa fa fa 00 00 00 04 [ 1497.741553] ^ [ 1497.748926] ffffffff8677e200: fa fa fa fa 00 fa fa fa fa fa fa fa 00 00 00 00 [ 1497.756281] ffffffff8677e280: 00 00 00 00 02 fa fa fa fa fa fa fa 00 00 00 00 [ 1497.763639] ================================================================== [ 1497.770990] Disabling lock debugging due to kernel taint [ 1497.776828] Kernel panic - not syncing: panic_on_warn set ... [ 1497.776828] [ 1497.784193] CPU: 1 PID: 20559 Comm: syz-executor.1 Tainted: G B 4.14.134 #30 [ 1497.792490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1497.801823] Call Trace: [ 1497.804399] dump_stack+0x138/0x19c [ 1497.808007] ? strscpy+0x20e/0x2c0 [ 1497.811526] panic+0x1f2/0x426 [ 1497.814698] ? add_taint.cold+0x16/0x16 [ 1497.818656] kasan_end_report+0x47/0x4f [ 1497.822612] kasan_report.cold+0x130/0x2af [ 1497.826826] __asan_report_load8_noabort+0x14/0x20 [ 1497.831736] strscpy+0x20e/0x2c0 [ 1497.835082] prepare_error_buf+0x94/0x1aa0 [ 1497.839300] ? __lock_is_held+0xb6/0x140 [ 1497.843430] ? scnprintf_le_key+0x600/0x600 [ 1497.847749] __reiserfs_warning+0x9f/0xb0 [ 1497.851881] ? reiserfs_printk+0xd0/0xd0 [ 1497.855922] ? __bread_gfp+0x63/0x290 [ 1497.859702] ? __brelse+0x50/0x60 [ 1497.863134] ? read_super_block+0x11d/0x8c0 [ 1497.867435] reiserfs_fill_super+0xa71/0x2b20 [ 1497.871927] ? finish_unfinished+0x1010/0x1010 [ 1497.876493] ? snprintf+0xa5/0xd0 [ 1497.879926] ? set_blocksize+0x270/0x300 [ 1497.883967] ? ns_test_super+0x50/0x50 [ 1497.887838] mount_bdev+0x2be/0x370 [ 1497.891447] ? finish_unfinished+0x1010/0x1010 [ 1497.896010] get_super_block+0x35/0x40 [ 1497.899880] mount_fs+0x97/0x2a1 [ 1497.903232] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1497.907711] do_mount+0x417/0x27d0 [ 1497.911262] ? copy_mount_options+0x5c/0x2f0 [ 1497.915652] ? rcu_read_lock_sched_held+0x110/0x130 [ 1497.920651] ? copy_mount_string+0x40/0x40 [ 1497.924869] ? copy_mount_options+0x1fe/0x2f0 [ 1497.929365] SyS_mount+0xab/0x120 [ 1497.932799] ? copy_mnt_ns+0x8c0/0x8c0 [ 1497.936678] do_syscall_64+0x1e8/0x640 [ 1497.940559] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1497.945384] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1497.950551] RIP: 0033:0x45c27a [ 1497.953720] RSP: 002b:00007f3401070a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1497.961423] RAX: ffffffffffffffda RBX: 00007f3401070b40 RCX: 000000000045c27a [ 1497.968674] RDX: 00007f3401070ae0 RSI: 0000000020000280 RDI: 00007f3401070b00 [ 1497.975926] RBP: 0000000000000000 R08: 00007f3401070b40 R09: 00007f3401070ae0 [ 1497.983175] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003 [ 1497.990426] R13: 00000000004c8a7f R14: 00000000004df8b8 R15: 00000000ffffffff [ 1497.999002] Kernel Offset: disabled [ 1498.002779] Rebooting in 86400 seconds..